Company XYZ wants to secure the data plane of their network. Which two technologies can be included in the security design? (Choose two)

Dynamic ARP Inspection (DAI) operates on the data plane by intercepting ARP packets and validating them against the DHCP snooping binding table, dropping packets with mismatched IP-to-MAC mappings to prevent ARP poisoning attacks.

IP Source Guard filters data plane IP packets on untrusted interfaces by comparing source IP and MAC addresses against the DHCP snooping binding table, preventing unauthorized hosts from sending traffic using spoofed IP addresses.

BEEP (Blocks Extensible Exchange Protocol) is an application-layer framework for network messaging and is not a recognized data plane security technology.

CPPr (Control Plane Policing - refined) protects the control plane by rate-limiting traffic destined to the router's CPU, not the data plane that forwards transit traffic.

MPP (Management Plane Protection) restricts management access to specific interfaces and protocols, which is a management plane security feature, not a data plane security feature.