The combination of cryptographic algorithms that are compliant with Federal Information Processing Standard (FIPS) Publication 140-2 for non-legacy systems is the one that uses Diffie-Hellman (DH) key exchange with DH (>=2048 bits), symmetric key encryption with Advanced Encryption Standard (AES) > 128 bits, and digital signature with Digital Signature Algorithm (DSA) (>=2048 bits). FIPS 140-2 is a standard that specifies the security requirements and validation procedures for cryptographic modules used by federal agencies and other organizations. FIPS 140-2 defines four security levels, from level 1 to level 4, based on the security functions, mechanisms, and assurances of the cryptographic modules. FIPS 140-2 also defines the approved cryptographic algorithms and key sizes that can be used by the cryptographic modules, depending on the security level and the application. For non-legacy systems, FIPS 140-2 requires the use of approved cryptographic algorithms and key sizes that meet the minimum security strength of 112 bits, as specified by the National Institute of Standards and Technology (NIST) Special Publication 800-131A. Diffie-Hellman (DH) key exchange with DH (>=2048 bits), symmetric key encryption with AES > 128 bits, and digital signature with DSA (>=2048 bits) are compliant with FIPS 140-2 for non-legacy systems, as they use approved cryptographic algorithms and key sizes that meet or exceed the minimum security strength of 112 bits. Diffie-Hellman (DH) key exchange with DH (<= 1024 bits), symmetric key encryption with AES < 128 bits, and digital signature with Rivest-Shamir-Adleman (RSA) (1024 bits) are not compliant with FIPS 140-2 for non-legacy systems, as they use cryptographic algorithms and key sizes that do not meet the minimum security strength of 112 bits. Blowfish and Elliptic Curve Digital Signature Algorithm (ECDSA) are not approved cryptographic algorithms by FIPS 140-2, and therefore are not compliant with FIPS 140-2 for non-legacy systems. References: Official (ISC)2 CISSP CBK Reference, Fifth Edition, Domain 3, Security Architecture and Engineering, page 268. CISSP All-in-One Exam Guide, Eighth Edition, Chapter 3, Security Architecture and Engineering, page 231.