Which two practices support an acceptable network security posture? (Choose two.)

Disabling unused or unnecessary ports, interfaces, and services reduces the attack surface of network devices, preventing potential attackers from exploiting vulnerabilities associated with these components. This is a fundamental security hardening practice. Maintaining network equipment in a secure physical location prevents unauthorized access, tampering, or theft of devices, which could lead to data breaches or service disruptions. Using a cryptographic keychain is good for authentication but doesn't encompass the broad concept of a security posture. Placing internal email and file servers in a DMZ is incorrect; DMZs are for publicly accessible services, not internal resources. Backing up configurations to encrypted USB drives is a good practice for recovery, but the security of the USB drive itself is a separate concern and not a primary element of overall network security posture.