Which two statements apply to Cisco TrustSec enforcement? $($Choose two.$)$

Enforcement using traditional ACLs is less resource intensive than Cisco TrustSec enforcement using SGACLs.

Cisco TrustSec enforcement can be performed on a network device using SGACLs or on an SGT$-$aware firewall, such as Cisco ASA appliance.

Cisco TrustSec provides role$-$based, topology$-$independent access control within a network.

SGACL contains source and destination SGTs$.$

SGACL contains source and destination IP addresses.