Which two items are required for data plane hardening of an infrastructure device? (Choose two)

Disabling unused services is a management plane hardening technique that reduces attack surface on the device itself but does not harden the data plane.

Routing protocol authentication secures control plane adjacencies against injection attacks but does not filter or police data plane traffic.

SNMPv3 provides authenticated and encrypted management plane access but has no role in data plane hardening.

Redundant AAA servers improve management plane availability and resilience but are not a data plane hardening control.

Infrastructure ACLs (iACLs) are deployed at network ingress points to explicitly permit only authorized traffic destined for infrastructure address space and drop everything else, directly filtering data plane traffic before it can reach the device.

Warning banners are a legal deterrent and management plane control and provide no technical data plane protection.

Control Plane Policing (CoPP) rate-limits or drops traffic that is punted from the data plane up to the route processor, preventing CPU exhaustion attacks and protecting the control plane from data plane-sourced floods.