A systems administrator just purchased multiple network devices. Which of the following should the systems administrator perform to prevent attackers from accessing the devices by using publicly available information?

Changing default passwords is crucial because attackers often use publicly available lists of common default credentials to gain unauthorized access to newly installed devices. By immediately changing these passwords, the administrator creates a unique, stronger barrier against such attacks. Installing endpoint protection is important for host security but doesn't address the initial access vulnerability of default device credentials. Disabling ports/protocols can reduce the attack surface but doesn't prevent access if an attacker compromises a device via its default password on an open, necessary port. Removing unnecessary software is good practice for reducing vulnerabilities but doesn't mitigate the specific risk posed by unchanged default passwords.