You've been told to replace insecure protocols on the network. Which of the following should you replace? Choose the two most critical.

A VPN connection using $168-$bit $3$DES encryption

SNMPv$3$ using TLS $1\mathrm{.}0$ and AES$128$

A web API endpoint using TLS $1\mathrm{.}3$ and a randomly generated $192-$bit API key

SSH remote access protected with a $3072-$bit RSA key

Telnet access routed through an IPsec tunnel with AES$256$ encryption