Choose two. On an enterprise access switch, which two features are appropriate to enable to mitigate IPv6 Router Advertisement (RA) spoofing attacks?

IPv6 RA Guard (Router Advertisement Guard) is a security feature that prevents malicious or misconfigured IPv6 routers from advertising themselves on the network. It inspects incoming RA messages and blocks those from unauthorized sources, mitigating RA spoofing attacks where an attacker pretends to be a legitimate router to redirect traffic or launch other attacks. IPv6 ND Inspection/Snooping (Neighbor Discovery Inspection/Snooping) extends this protection by validating Neighbor Discovery Protocol (NDP) messages, including RAs, against a trusted database or policy. This ensures that only valid NDP messages are processed, further preventing spoofing. "ip dhcp snooping" is for IPv4 DHCP security and does not apply to IPv6. "port-security MAC address limit" restricts the number of MAC addresses on a port, which is a general security measure but doesn't specifically address IPv6 RA spoofing.