A technician has just logged into a newly provisioned host. The image used was provided by the cloud provider and is unmodified. Which of the following are steps that should be taken to harden it…

Removing default service accounts eliminates well-known, predictable credential targets that attackers routinely attempt to exploit, since unmodified provider images often include these accounts with default or widely known configurations.

Setting clock synchronization supports log integrity and authentication protocols like Kerberos but does not directly harden the host against attack vectors present in a default image.

Disabling unneeded services reduces the attack surface by eliminating network-exposed processes that represent potential entry points - every running service is a candidate for exploitation if a vulnerability exists in it.

Creating a personal login account is a good access control practice but does not remove existing vulnerabilities or reduce the attack surface of the provisioned image.

Changing the hostname is an administrative identification task and provides no security benefit against attackers targeting the host.