DRAG DROP [Security Concepts] Drag and drop the capabilities from the left onto the correct technologies on the right.

Next Generation Intrusion Prevention System (NGIPS): Cisco defines its NGIPS capabilities as providing "superior threat prevention and mitigation" by leveraging contextual awareness to detect both known exploits and unknown (zero-day) threats.

Advanced Malware Protection (AMP): AMP is distinguished by its "retrospective security" capabilities. The keywords "tracking," "analysis," and "remediation" (specifically the ability to fix issues after a file enters the network) are unique to AMP's "before, during, and after" attack continuum.

Application Control and URL Filtering: This technology (often part of AVC) operates at the "application-layer," allowing administrators to enforce policies on specific "custom applications and URLs" rather than just ports or IP addresses.

Cisco Web Security Appliance (WSA): The WSA is a dedicated "web protection" gateway. The description "combined integrated solution... of web protection" directly describes the WSA's role in securing web traffic with visibility and control.

Cisco Systems. (2015). Cisco ASA with Firepower Services Data Sheet. Cisco.com. (Section: "Product Overview", Table 1 features the exact phrase "Superior threat prevention and mitigation for known and unknown threats" and "Detection, blocking, tracking, analysis, and remediation" for AMP).

Cisco Systems. (2020). Cisco Web Security Appliance Data Sheet. Cisco.com. (Describes the WSA as an "all-in-one web security gateway" providing defense, visibility, and control).

Cisco Systems. Firepower Management Center Configuration Guide, Version 6.0. (Chapter: "Access Control Policies", specifically discussing "Application Visibility and Control (AVC)" and "URL Filtering" for application-layer enforcement).