Which of the following are cases in which an engineer should recommend the decommissioning of a network device? (Choose two.)

Decommissioning a network device is necessary when it poses a security risk or can no longer function securely. If a device's encryption level cannot meet organizational standards, it creates a vulnerability that could expose sensitive data, making decommissioning essential. Similarly, if a device is unable to receive authorized updates (e.g., security patches or firmware updates), it becomes susceptible to known exploits and vulnerabilities, making it a significant security liability. Moving a device to a test environment or an isolated segment does not inherently require decommissioning; these are operational changes that might involve reconfiguring the device. Moving a device to a different location or being configured to use cleartext passwords (while a serious security flaw) would typically lead to remediation (reconfiguration) rather than immediate decommissioning, unless remediation is impossible or impractical.