Which service module configuration is recommended to automatically detect and block traffic from malicious hosts?

Which service module configuration is recommended to automatically detect and block traffic from malicious hosts?

A.
FWSM

B.
IDSM that is deployed in IDS mode

C.
IDSM that is deployed in IPS mode

D.
FWSM that is coupled with the NAM