Exam N10-009 topic 1 question 254 discussion

Direct device-hardening techniques (modifying the device itself): A (disabling unused ports), E (changing default passwords), stand out. Network-wide or monitoring practices: B (scanning) and C (log monitoring) are more about ongoing security management, not hardening the device. D (SSO) is about authentication, not device configuration F (least privilege on the device) may be a good choice too but. The best device-hardening techniques from the list are A and E, as they are universally recognized, directly applicable to securing the device, and foundational to reducing vulnerabilities.