Which two types of SGT propagation are supported by Cisco TrustSec? (Choose two.)

Key chain is a mechanism used for authenticating routing protocol updates, not for propagating SGTs.

Offline tagging is not a standard SGT propagation mechanism supported by Cisco TrustSec.

SXP (Security Group Tag Exchange Protocol) is a control plane mechanism that enables SGTs to be propagated between network devices that do not support inline tagging, such as older network devices or third-party devices.

Reconciliation is a process often associated with policy management or database synchronization, not a method for SGT propagation.

Inline tagging is a data plane mechanism where the SGT is directly embedded into the Ethernet frame header (or IP packet header) as traffic traverses TrustSec-aware network devices.