Implementing Cisco IP Switched Networks (SWITCH v2-0) (#207)

Which two limitations of IP Source Guard are true? (Choose two.)

It is supported only on packets switched in hardware.
It is supported only on ingress Layer 2 ports.
It is supported only on egress Layer 3 ports.
It is supported only an PAgP EtherChannels.
It is supported only on ingress Layer 3 ports.