Which two features are not supported when FIPS mode is enabled on a Cisco IOS XE SD-WAN device? (Choose two.)

SXP reflectors, which propagate SGTs, are generally supported in FIPS mode unless they rely on a non-FIPS compliant underlying component.

SXP over IPv6 is a protocol transport mechanism and is not specifically disallowed by FIPS mode on SD-WAN devices.

Cisco TrustSec, which uses Security Group Tags (SGTs) for policy enforcement, is not supported in FIPS mode on Cisco IOS XE SD-WAN devices, as TrustSec often relies on security methods not compliant with FIPS standards.

Static IP-SLA mapping is a performance monitoring feature that is typically unaffected by FIPS mode enablement.

The use of PAC Authentication Keys is explicitly not supported when FIPS mode is enabled on Cisco IOS XE SD-WAN devices, as FIPS requires more stringent authentication mechanisms.