What are two suggested best practices to implement when securing network devices? (Choose two.)