Which two practices are recommended for an acceptable security posture in a network? (Choose two)

While backing up configurations is good, relying solely on encrypted USB drives for secure retrieval isn't a universally recommended enterprise practice, as centralized, robust backup systems are generally preferred.

Maintaining network equipment in a secure physical location (e.g., locked server rooms, restricted access) prevents unauthorized physical access, which is a critical security control to protect against tampering and data theft.

Using a cryptographic keychain is a specific method for secure authentication between devices, not a broad security posture practice equivalent to physical security or attack surface reduction.

Placing internal email and file servers in a DMZ is generally a poor security practice; DMZs are for services exposed to untrusted networks, while internal servers should be in the internal network behind appropriate firewalls.

Disabling unused or unnecessary ports, interfaces, and services reduces the attack surface of network devices, minimizing potential entry points and vulnerabilities that attackers could exploit.