An engineer is asked to protect unused ports that are configured in the default VLAN on a switch. Which two steps will fulfill the request? (Choose two)

Configuring ports in an EtherChannel bundles them for increased bandwidth and redundancy, which does not secure individual unused ports.

Administratively shutting down unused ports prevents any device from connecting to them and gaining network access, effectively disabling the port physically and logically.

Moving unused ports to an isolated, unused VLAN (e.g., VLAN 99) separates them from active network segments, preventing unauthorized devices from accessing network resources even if they are physically connected.

Configuring ports as trunk ports allows multiple VLANs to traverse them, which increases the attack surface for unused ports rather than securing them.

Enabling Cisco Discovery Protocol (CDP) allows device discovery but is not a security measure for unused ports and can potentially expose information about the switch.