Which two groups of settings should be reviewed when attempting to increase the security of virtual machines (VMs)? (Choose two.)

Disabling hardware devices such as serial ports, parallel ports, USB controllers, and floppy drives that the VM does not require removes physical-layer attack vectors that malicious processes could exploit through the guest OS.

Disabling unexposed features - VMware functionality not required by the workload - reduces the attack surface by ensuring unused code paths and virtual interfaces are not accessible to attackers.

VMware Tools devices provide essential guest OS integration such as time synchronization and management-plane communication; disabling them would break core VM manageability rather than improve security posture.

Disabling VM Template features is not a recognized security hardening category in VMware guidelines; VM templates are a provisioning construct and do not represent a runtime attack surface.