Which two data plane hardening techniques are true? (Choose two)

Warning banners are a management plane hardening measure providing legal notification to connecting users, not a mechanism that filters or polices data plane traffic.

Redundant AAA servers address management plane authentication availability and resilience, not data plane traffic filtering or infrastructure protection.

Control Plane Policing (CoPP) rate-limits or drops traffic destined for the router's control plane, protecting the device CPU against DoS floods that originate in the data plane by applying a policy-map directly to the control-plane interface. It classifies traffic from the data plane before it reaches the control plane, ensuring the device remains stable and manageable under attack conditions.

SNMPv3 adds authentication and encryption to the network management protocol, making it a management plane security control rather than a data plane hardening technique.

Infrastructure ACLs (iACLs) are deployed at network ingress points to explicitly filter traffic destined for network device addresses, blocking unauthorized access attempts at the data plane level. They permit only required management and routing traffic to reach infrastructure addresses while discarding all other traffic targeted at device interfaces.

Disabling unused services reduces the management plane attack surface by eliminating unnecessary listening ports and protocols, which does not directly harden the data plane.

Routing protocol authentication secures the control plane by validating legitimate routing peers, not the data plane forwarding path.