The following are Windows workstation hardening techniques except:

Question $44$ options:

disable unneeded services.

install only the roles you need for any particular server.

close all open ports.

enable Internet Protocol Security $($IPSec$)$ for all server$-$to$-$server connections.