A penetration tester observes that several high-numbered ports are listening on a public web server. However, the system owner says the application only uses port 443. Which of the following would be BEST to recommend?

A. Transition the application to another port.
B. Filter port 443 to specific IP addresses.
C. Implement a web application firewall.

D. Disable unneeded services.