Which two solutions help combat social engineering and phishing at the endpoint level? (Choose two.)

Cisco Umbrella provides DNS-layer security that effectively blocks access to known malicious domains, including those leveraged in phishing attempts, before a connection can be established, thereby protecting endpoints from reaching harmful sites.

Cisco ISE is a network access control solution that manages authentication and authorization, but it does not directly combat social engineering or phishing at the endpoint level by blocking malicious content.

Cisco DNA Center is a network management and automation platform that does not provide direct endpoint-level protection against phishing or social engineering.

Cisco TrustSec is a network segmentation technology that enforces access policies but does not specifically defend against social engineering or phishing attacks originating from external sources targeting endpoints.

Cisco Duo Security offers multi-factor authentication (MFA) and device trust capabilities, directly mitigating the impact of credential theft often resulting from social engineering and phishing attacks by requiring a second verification factor even if a user's password is compromised.