How can controller failover be performed? (Choose two.)