Select two recommendations to secure switch ports located in office areas outside the IT closet.

Administratively shutting down unused ports prevents unauthorized devices from connecting to the network via an available port. This is a fundamental security practice. Implementing port-based authentication (e.g., 802.1X) requires devices or users to authenticate before gaining network access, even if they physically connect to an active port. This prevents unauthorized access from unknown devices. Enabling PortFast is for spanning-tree convergence and doesn't enhance security. Configuring static ARP entries is a security measure against ARP spoofing, but it's not a primary recommendation for securing physical switch ports in office areas. Configuring ports to a fixed speed is a performance/compatibility setting, not a security measure.