A building engineer just installed a new environmental control system (ECS) for a room that is critical to the company’s operation and needs the ability to manage
and monitor the system from any part of the network. Which of the following should the security administrator utilize to minimize the attack surface and still allow the
needed access?

A.
Configure the ECS host-based firewall to block non-ECS application traffic

B.
Create an encrypted connection between the ECS and the engineer’s computer

C.
Install a firewall that only allows traffic to the ECS from a single management and monitoring network

D.
Implement an ACL that permits the necessary management and monitoring traffic