To improve the stability of the network and protect it from intrusions, you must design control plane security. Which two features should you enable as part of this design? (Choose two.)

SNMP security is a management plane concern that restricts device management access via community strings or SNMPv3 authentication, not a control plane protection mechanism.

uRPF is a data plane anti-spoofing feature that validates the source IP address of incoming packets against the routing table, not a mechanism to protect the router CPU.

IPsec operates at the data plane to encrypt and authenticate traffic flows between endpoints and does not protect the router's internal control plane processing.

An IP receive ACL (rACL) is applied to traffic destined directly to the router's own IP addresses, filtering malicious or unauthorized packets before they consume CPU resources. This provides the earliest possible enforcement point for protecting routing processes from reconnaissance scans and flooding attacks aimed at the control plane.

Control Plane Policing (CoPP) uses a QoS policy-map applied to the control plane to rate-limit or drop traffic directed at the router CPU by traffic class. By defining separate classes for routing protocols, management traffic, and other categories, CoPP prevents a single traffic type from exhausting CPU resources and causing routing instability.

Role-based CLI access is a management plane feature that restricts which commands an authenticated user can execute and does not protect the control plane from network-based attacks.