The organization's network includes multiple security zones, a virtual private network $($VPN$)$ for remote access, and a web application firewall $($WAF$).$ Which deployment method provides the MOST comprehensive protection in this scenario?

A$.$Deploy the IPS$/$IDS devices in tap$/$monitor mode at the entry and exit points of the VPN tunnel.

B$.$Deploy the IPS$/$IDS devices in passive mode within the internal network.

C$.$Deploy the IPS$/$IDS devices in inline mode at the network perimeter.

D$.$Deploy the IPS$/$IDS devices in inline mode next to the WAF.