A technician has just logged into a newly provisioned host. The image used was provided by the cloud provider and is unmodified. Which of the following are steps that should be taken to harden it agai

Default service accounts often have well-known credentials or unnecessary privileges, making them common targets for attackers. Removing or disabling these accounts, or changing their default passwords, eliminates a significant security risk by closing potential backdoors.

Setting clock synchronization is crucial for accurate logging, auditing, and certificate validation, but it is not a direct hardening measure against system attacks.

Cloud provider images may contain numerous pre-installed services that are not essential for a specific host's function. Disabling unneeded services reduces the attack surface by eliminating potential vulnerabilities associated with those services and conserving system resources.

Creating a personal login account enhances accountability and user management but does not directly harden the underlying system against potential attacks.

Changing the hostname is primarily for identification and organization within a network and offers minimal security hardening against attacks.