Which two mechanisms are used to guarantee the integrity of data packets in the Cisco SD-WAN architecture data plane? (Choose two.)

Certificates are used in the Cisco SD-WAN control plane for device authentication and identity verification, not for guaranteeing data plane packet integrity.

Transport locations (TLOCs) are logical identifiers representing a WAN Edge's transport attachment points and are not security mechanisms for ensuring packet integrity.

Authentication Headers (AH) provide data origin authentication and integrity verification for IP packets by computing an HMAC over the packet contents, ensuring packets have not been tampered with in transit.

Encapsulation Security Payload (ESP) provides both confidentiality through encryption and data integrity through authentication, making it a core mechanism for protecting SD-WAN data plane traffic in IPsec tunnels.

A TPM chip is a hardware security module used for secure key storage and platform integrity attestation during boot, not a mechanism that operates in the data plane to guarantee packet integrity.