A company has developed an IPv6-adoption plan for its campus network that requires dual-stack connectivity across the network. Campus users must have IPv6 connectivity to an HR management application, the first IPv6-only application hosted in the company’s data center. Which two security mechanisms can prevent a malicious user from masquerading as the IPv6 gateway? (Choose two.)