A cloud administrator is creating a script to harden web application instances hosted on a PaaS cloud platform as they are deployed. Which of the following steps is the administrator MOST likely to in

Disabling unsecure cryptographic ciphers is a crucial application-level hardening step for web application communication, but it is focused on the application's configuration rather than the fundamental security of the underlying compute instance's operating system access.

While typical PaaS models abstract hypervisor management from customers, some PaaS-like services or advanced configurations allow administrators control over the underlying virtual machine's operating system that hosts the application. In such scenarios, limiting highly privileged access (often referred to as 'root access') to these underlying instances, especially by preventing direct or insecure access from public IP addresses, is a fundamental security practice to harden the execution environment of the web application.

Enforcing strong passwords on network equipment is generally a responsibility of the cloud provider in a PaaS model, as the customer does not manage the underlying network infrastructure.

Updating load balancer software to the latest version is typically a task handled by the cloud provider for PaaS offerings, as load balancers are part of the managed infrastructure layer.