Which two changes must be made in order to migrate from DMVPN Phase 2 to Phase 3 when EIGRP is configured? (Choose two.)

NHRP shortcuts ('ip nhrp shortcut') are configured on the spokes in Phase 3, not on the hub, so adding them to the hub has no effect.

NHRP redirects ('ip nhrp redirect') are configured on the hub in Phase 3, not on the spoke, making this placement incorrect.

Disabling EIGRP next-hop-self is the Phase 2 requirement - it is what must be undone (reversed to enabled) when migrating to Phase 3, not a new step.

In DMVPN Phase 2, the hub must disable EIGRP next-hop-self ('no ip next-hop-self eigrp') so that spokes receive routing updates that point directly to the originating spoke for spoke-to-spoke traffic. Phase 3 removes this dependency by using NHRP redirects on the hub and NHRP shortcuts on spokes to dynamically build direct paths, so the hub must re-enable next-hop-self ('ip next-hop-self eigrp') to advertise itself as the routing next-hop while NHRP handles dynamic shortcut resolution.

Adding NHRP redirects on the hub is a valid Phase 3 configuration step, but it is an NHRP-layer change rather than the EIGRP-specific routing change that the question focuses on when EIGRP is configured.