Which of the following are the best methods for hardening end user devices? (Select two.)

While group-level permissions are important for managing user access and rights within a network, they do not directly harden end user devices. This method focuses more on controlling user access to resources rather than securing the devices themselves against threats. Therefore, it is not considered a primary method for device hardening.

Account lockout policies can help prevent unauthorized access by locking accounts after a set number of failed login attempts. However, this method primarily addresses user account security rather than the overall security posture of the device itself. It does not provide the same level of protection as encryption or endpoint security solutions.

A proxy server acts as an intermediary between end users and the internet, helping to filter traffic and provide anonymity. While it can enhance security, it does not directly harden end user devices. Its function is more about managing network traffic rather than securing the individual devices themselves.

Segmentation involves dividing a network into smaller parts to improve security and manageability. While it can reduce the impact of a security breach, it is a network-level strategy rather than a direct method for hardening end user devices. As such, it does not effectively address the security of individual devices.