Which special RBAC verbs guard the RBAC API itself? Choose two.

Answer: A. bind
B. escalate

bind and escalate are checked on roles and clusterroles; impersonate and approve guard other APIs.

Source: Authorization (Kubernetes) — Request verbs and authorization