What are two functions of IPv6 Source Guard? (Choose two.)

IPv6 Source Guard provides stateless and stateful protection against address spoofing. It denies traffic from unknown or unallocated source addresses by performing a stateless check against a configurable prefix list, ensuring only valid addresses are used. It also uses the populated binding table (created by DHCPv6 snooping or static entries) to allow legitimate traffic, effectively blocking traffic from sources not present in the table. This stateful inspection prevents unauthorized devices from sending traffic using spoofed IPv6 addresses. IPv6 Source Guard is dependent on IPv6 Neighbor Discovery and DHCPv6 snooping to populate its binding table, so it does not work independently from them. It does not deny traffic by inspecting Neighbor Discovery packets for specific patterns or by inspecting DHCP packets for specific sources; instead, it uses the information gathered by these protocols.