When adding an IPSec headend termination device to your network design, which two performance indicators are the most accurate to determine device scalability? (Choose two.)

CPU capability is a hardware attribute that influences performance but is not an accurate standalone scalability indicator - devices with similar CPUs can differ greatly in IPSec performance depending on hardware crypto offload engines and dedicated ASICs.

Bandwidth capability describes raw interface throughput and does not account for the per-packet cryptographic processing overhead of IPSec, making it an insufficient indicator of actual encrypted traffic scalability.

Packets per second measures the rate at which the device can encrypt, decrypt, and forward IPSec-protected traffic, directly reflecting the device's cryptographic processing capacity and where it will bottleneck under load.

Maximum tunnel termination capability defines the upper limit of concurrent IPSec sessions the device can maintain, making it the most precise metric for determining how many remote sites or clients the headend can scale to support.