A system administrator is tasked to harden a server so that it is not accessible using HTTP. Which of the following tools or techniques should the administrator use to accomplish this? (Select two.)

Changing default passwords is a crucial general security practice but does not specifically prevent HTTP access to a server.

Antivirus software protects against malware but does not directly control access via specific network protocols like HTTP.

Encryption software, specifically SSL/TLS certificates and configuration, is necessary to enable HTTPS (secure HTTP), which allows the server to remain accessible via a secure web protocol while preventing insecure HTTP communication.

Disabling port 80, which is the standard port for unencrypted HTTP traffic, directly prevents any insecure HTTP access to the server, fulfilling the hardening requirement.

Disabling port 443 would prevent HTTPS access, which is the secure alternative to HTTP, and would be counterproductive to hardening if web services are still needed.

A firewall is a tool used to implement port disabling (like port 80), but 'disable port 80' is the specific technique that directly addresses the HTTP accessibility requirement.

Patch management keeps software up to date but does not directly control protocol-specific access like HTTP.