Which of the following is a hardening technique that an administrator would perform when creating a standard VM template that would be used for deploying servers in a production environment?

Creating a standard user account is a basic configuration task performed inside the VM instance, not a process-level control governing how a template is created and approved.

Disabling unneeded services is a valid hardening action applied to the VM image content, but it describes what is configured within the template rather than the governance process required to authorize and release it.

Establishing a performance baseline is a monitoring and capacity-planning activity, not a hardening technique applied during VM template creation.

Change management is a mandatory governance control in production environments that requires any new template - representing a planned change - to be formally reviewed, approved, and documented before use. This process prevents unauthorized or misconfigured templates from reaching production and ensures full accountability and traceability for all deployed configurations.