Which two options are attack vectors protected by NGFW? (Choose two.)