What are two characteristics of IPv6 Source Guard? (Choose two.)

IPv6 Source Guard (IPv6 SG) is a security feature that filters traffic based on the source IPv6 address and prevents unauthorized devices from sending traffic. It requires either a static binding configured by the user or dynamic bindings learned through IPv6 snooping. IPv6 snooping must be enabled on Layer 2 access or trunk ports to populate the binding table with valid IPv6 source addresses and MAC addresses. Without snooping, IPv6 SG cannot dynamically learn valid source information. While IPv6 SG enhances network security, it is not primarily designed for mitigating large-scale DDoS attacks in service provider environments; other specialized solutions handle that. It does not require validate-prefix to be enabled, nor does it recover missing binding table entries; it relies on snooping or static configuration for binding information.