Which two control plane policer designs must be considered to achieve high availability? (Choose two.)

Hardware enforcement of control plane policers ensures that rate-limiting occurs at line rate in the ASIC, preventing traffic bursts from ever reaching the software-based CPU and destabilizing routing processes. This hardware-first approach is fundamental to a high-availability design because it guarantees protection even during large-scale traffic events.

Control plane policers are required on all network devices, not only externally facing ones, because internal misconfigurations or traffic bursts can also overwhelm the control plane.

Properly tuned control plane policers should not generate false alarms in network management systems, so this statement does not represent a valid high-availability design consideration.

Control plane policers must intercept and rate-limit traffic destined to the CPU before any data-plane forwarding decision is applied, ensuring that the control plane is protected regardless of the data-plane forwarding outcome.

While factoring in protocol overhead is a tuning best practice, it is not one of the two primary architectural design principles required for high availability.