An administrator is building a web server to host an online banking application. The server should not have access to the internal network, and only ports that are used by the application should be opened. Which of the following MUST be implemented to meet

the business requirements?

A. Add the server to the internal network and use IPSec to encrypt communication between the web server and other devices.

B. Use an ISA server to block access to the internal network.

C. Use VPN to block all ports that are not

used by the application.

D. Use the company firewall to block all ports that are not used by the application.