Which of the following preventative measures would BEST secure a web server from being port scanned

Which of the following preventative measures would BEST secure a web server from being port
scanned by attackers publicly?

A.
Content filter

B.
Proxy server

C.
ACL implicit allow

D.
Firewall