A system administrator is tasked to harden a server so that it is not accessible using HTTP. Which of the following tools or techniques should the administrator use to accomplish this? (Select two.)

Changing default passwords strengthens authentication security but does not affect which network ports or protocols are open and accessible on the server.

Antivirus software detects and removes malware but has no mechanism for controlling network port availability or blocking specific application-layer protocols like HTTP.

Encryption software (SSL/TLS) enables HTTPS on the server, replacing unencrypted HTTP with encrypted communications and rendering the server inaccessible via plaintext HTTP. Implementing TLS is a direct hardening step that forces all web traffic to use encrypted channels.

Disabling port 80 removes the default HTTP listener at the host level, causing any client attempting an HTTP connection to be refused at the transport layer, which directly and reliably prevents HTTP access to the server.

Port 443 is the default port for HTTPS (encrypted web traffic); disabling it would eliminate secure access, which is the opposite of the hardening goal.

A network firewall can filter traffic at the perimeter but does not disable the HTTP service on the server itself, leaving the server vulnerable if the firewall rule is ever misconfigured or bypassed.

A patch management server automates software updates and vulnerability remediation but does not configure, disable, or control network ports or protocols on managed servers.