Which two options are attack vectors protected by Identity and Access Control? (Choose two.)

Backups are a data availability and recovery concern addressed by backup and disaster recovery solutions, not by Identity and Access Control mechanisms.

Mobile devices represent a significant attack vector because they connect to corporate networks from untrusted locations, and Identity and Access Control enforces device compliance checks and user authentication before permitting access.

Endpoints such as laptops and desktops are primary targets for credential-based attacks and unauthorized access, and solutions like Cisco ISE apply posture assessment and role-based access policies to mitigate this vector.

Cloud application access is primarily governed by Cloud Access Security Brokers (CASB), which is a separate solution category from traditional Identity and Access Control.

Voicemail is a unified communications service and is not classified as an attack vector within the scope of Identity and Access Control solutions.