Which statement about the IPv6 RA Guard feature is true?

IPv6 RA Guard is supported on private VLANs. This feature helps prevent rogue IPv6 routers from advertising themselves and potentially disrupting network operations by dropping unauthorized Router Advertisement (RA) messages. It operates at Layer 2, inspecting RA messages to ensure they originate from legitimate sources. LAG bundle interfaces are not directly supported by IPv6 RA Guard; it typically operates on individual physical or logical interfaces within the bundle. Packets dropped by security features like RA Guard are generally not spanned (mirrored) to monitoring ports, as the purpose is to discard them before further processing. IPv6 RA Guard protects against unauthorized RAs in local network segments and does not offer protection for tunneled IPv6 traffic, which encapsulates the IPv6 packets within another protocol.