According to security best practices, which two actions must you take to protect an unused switch port? (Choose two.)

Administratively shutting down an unused port using the `shutdown` command prevents any unauthorized devices from connecting and gaining access to the network, effectively disabling it.

Configuring an unused port as a trunk port is a security risk because it allows traffic for all VLANs to potentially traverse the port, increasing the attack surface.

Configuring a port to automatically come online (using `no shutdown`) is the opposite of securing an unused port, as it makes the port active and vulnerable to unauthorized connections.

Enabling Cisco Discovery Protocol (CDP) on an unused port can unintentionally disclose sensitive network information about the switch and its neighbors to anyone who plugs into that port, aiding in network reconnaissance by attackers.

Configuring the unused port as an access port on a VLAN other than VLAN 1 (preferably a dedicated 'blackhole' VLAN) isolates any accidental or malicious connection attempts from reaching active network segments or the default VLAN.