An administrator is responsible for creating a new template that will be used to deploy servers in a virtual environment. Which of the following should be the LAST step in completing the template?

Renaming the administrator account is an early hardening step that should be completed before conducting the system baseline, not after.

Applying security patches last ensures that every VM deployed from the template starts with the most current protections available at the time the template is sealed. All preceding hardening tasks - such as renaming accounts, disabling services, and capturing a baseline - are completed first so the baseline accurately reflects the hardened configuration before final patching. Patching last also closes the window where a partially prepared, unpatched template could be inadvertently used.

Conducting a system baseline captures a reference snapshot of the hardened system state and should occur before final patching, not as the last step.

Disabling unneeded ports and services is an initial hardening measure that precedes both the baseline capture and the final patching step.