Which describes a function of IPv6 Source Guard?

IPv6 Source Guard is a security feature that prevents unauthorized IPv6 devices from sending traffic on a network. It achieves this by building an address binding table, which maps IPv6 addresses to MAC addresses and the switch port they are connected to. It populates this table by inspecting Neighbor Discovery (ND) messages and DHCPv6 messages. The "address glean" mechanism refers to the process of extracting valid IPv6 address information from legitimate network traffic, such as ND messages, to populate this binding table. This allows Source Guard to identify and block traffic from sources that are not in its binding table, effectively preventing spoofing. The other options are incorrect because: "It inspects ND and DHCP packets to build an address binding table" is part of its function but not the most comprehensive description of how it finds existing addresses, as "address glean" is a key component. "It notifies the ND protocol to inform hosts if the traffic is denied by it" is incorrect; Source Guard denies traffic but doesn't actively inform hosts via ND protocol about the denial. "It denies traffic from known sources and allocated addresses" is the opposite of its function; it allows traffic from known and allocated sources and denies traffic from unknown or unauthorized sources.