Before updating firewall firmware, which two best practices should be implemented?

Creating a backup and downloading a settings file locally before updating the firewall firmware is a best practice because it ensures that you have a safe copy of the current configuration. In the event that the firmware update causes issues or doesn't go as planned, you can restore the firewall to its previous state using this backup. This step minimizes the risk of downtime and maintains continuity of service.

Having a backup allows for troubleshooting and recovery if the new firmware introduces bugs or incompatibilities with existing configurations or connected devices. Maintaining the configuration file locally provides an additional fail-safe measure since it can be restored regardless of potential problems caused by the update process.

In contrast, rebooting the firewall, while sometimes necessary, does not directly safeguard the firewall’s configuration or settings, nor does it assure protection against issues that may arise from the firmware update. Removing old firmware versions might be relevant to disk space or organization, but it isn't a primary concern during the preparation for an upgrade. Suspending all user activity, although it could reduce the risk of disruptions, is not practically feasible in many environments and does not address the underlying need for a backup.