What are two benefits of protecting the control plane of a network device? (Choose two.)

Filtering spoofed source addresses is a data plane function implemented with Unicast Reverse Path Forwarding (uRPF) or ACLs, not control plane protection.

IPsec encryption and confidentiality operate in the data plane (or hardware offload); control plane protection does not influence the encryption of transit traffic.

Routing protocol adjacencies (OSPF, BGP, EIGRP) are processed by the control plane CPU. If the control plane is protected from flood attacks, protocol hello and keepalive packets continue to be processed, preserving neighbor relationships.

Remote management protocols such as SSH and Telnet are also handled by the control plane. Policing protects the CPU so management traffic is not starved or dropped during an attack or high-load event.