Which two global commands must the network administrator implement to limit the attack surface of an internet-facing Cisco router? (Choose two.)

The `service tcp-keepalives-in` command enables TCP keepalives for incoming connections, which helps with connection management but does not inherently reduce the attack surface or vulnerability to external attacks.

The `no service password-recovery` command disables the password recovery mechanism, which enhances security by preventing unauthorized physical access for password resets, but it does not limit the attack surface from the internet.

The `no cdp run` command disables Cisco Discovery Protocol globally, preventing the router from sharing information about itself and its directly connected Cisco neighbors, thereby reducing information leakage to potential attackers.

The `no ip http server` command disables the insecure HTTP web server on the router, removing a potential attack vector for unencrypted management access.

The `ip ssh version 2` command enables a more secure management protocol (SSHv2) but enables a service rather than disabling one to limit the attack surface, though it is a good security practice for management access.