Which two types of authentication mechanisms can be used by VRRP for security? (Choose two.)

SHA-1 is not a supported authentication method in VRRP; the protocol only defines plaintext and MD5 options in its specification.

VRRP supports MD5 authentication, which provides cryptographic integrity verification of VRRP messages by hashing the packet contents with a shared secret key, preventing spoofed VRRP advertisements.

SHA-256 is not defined as an authentication mechanism in the VRRP specification (RFC 5798) and is not supported by Cisco VRRP implementations.

VRRP supports plaintext (simple text) authentication, where a clear-text password is included in VRRP packets to verify that messages originate from a trusted source, though this method does not provide encryption.

PEAP is an 802.1X EAP authentication method used for wireless and wired network access control, and has no relevance to VRRP gateway redundancy authentication.