Which two statements describes Cisco SD-Access? (Choose two.)

SD-Access provides end-to-end software-defined segmentation using Virtual Networks (VNs) and fine-grained micro-segmentation with Scalable Group Tags (SGTs), enforcing policies based on user identity and group membership.

SD-Access uses VXLAN, not GRE tunnels, for its overlay encapsulation, and while it supports mobility, the statement's description of GRE tunneling to a mobility agent is not accurate for its core overlay mechanism.

While SD-Access incorporates security features, it is not primarily defined as an 'automated encryption/decryption engine' for transport; its main focus is on segmentation and policy enforcement.

SD-Access builds a programmable overlay network, primarily using VXLAN encapsulation, which virtualizes the entire campus network infrastructure to simplify management and enable flexible policy application.

This description is too vague and general; SD-Access is a tightly integrated architectural solution rather than a collection of loosely or tightly coupled tools and applications.