Which two loT environment layers are protected by AMP for Endpoints? (Choose two.)