After installing the operating system on a new server, which of the following best practices should be completed before joining the server to the domain? (Choose two.)

Creating a configuration and performance baseline immediately after OS installation captures a clean reference state - CPU, memory, disk, and network metrics - that serves as the authoritative comparison point for future troubleshooting and capacity planning before domain policies or applications alter the system state.

Using a non-standard hostname for obscurity is not a recognized security best practice and complicates DNS registration, domain join, and asset management without providing real security benefit.

Installing all roles and applications that may be needed violates the principle of minimal footprint - only required roles should be deployed to reduce the server attack surface.

Installing all current security patches before domain join ensures the server has no known unpatched vulnerabilities, preventing it from being exploited or compromising other domain-joined systems the moment it joins the production network.

Detaching network cables is counterproductive because network connectivity is typically required to download and apply security patches before domain join.