Which two protocols does DMVPN leverage to build dynamic VPNs to multiple destinations? (Choose two.)

IKEv2 provides IPsec encryption over DMVPN tunnels but is not the protocol responsible for building the dynamic VPN topology or resolving peer endpoint addresses.

NHRP (Next Hop Resolution Protocol) is the protocol DMVPN uses to map tunnel overlay addresses to the underlying physical NBMA addresses, allowing spokes to dynamically query the hub for another spoke's public IP address before establishing a direct tunnel.

mGRE (multipoint GRE) allows a single tunnel interface to maintain GRE encapsulation with multiple remote peers simultaneously, which is the core data-plane construct that distinguishes DMVPN from traditional point-to-point GRE.

BGP is a routing protocol that can run over established DMVPN tunnels to exchange prefixes but has no role in creating or maintaining the dynamic tunnel infrastructure itself.

GDOI (Group Domain of Interpretation) is the key management protocol for GET VPN (Group Encrypted Transport VPN), which is an entirely different VPN architecture from DMVPN.