Which Intrusion Detection System is the best applicable for large environments where critical assets

Which Intrusion Detection System is the best applicable for large environments where critical assets on the network need extra security and is ideal for observing

sensitive network segments?

A. Honeypots

B. Firewalls

C. Network-based intrusion detection system (NIDS)

D. Host-based intrusion detection system (HIDS)