Which three options are important functions of IPv6 first-hop security? (Choose three.)

IPv6 replaced broadcasts entirely with multicast and anycast, so there is no broadcast mechanism to control and FHS provides no such function.

RA Guard is an FHS feature that filters Router Advertisement messages on untrusted ports, preventing unauthorized routers from advertising IPv6 prefixes and default routes into the network.

IPv6 ND Inspection monitors Neighbor Discovery traffic and suppresses excessive or anomalous multicast ND messages, protecting against ND cache exhaustion and spoofing attacks.

IPv6 mandates that only source hosts perform fragmentation, not intermediate routers, and FHS does not include any feature to prevent packet fragmentation.

DHCPv6 Guard is an FHS feature that blocks DHCPv6 server reply messages on untrusted ports, preventing rogue DHCPv6 servers from assigning IPv6 addresses or configuration parameters to clients.