What should be included in the design deliverables to support this separate trust zone?

In a cloud design, an architect has defined a separate trust zone for host management. The hosts will be running open source hypervisors.

What should be included in the design deliverables to support this separate trust zone?
A . Federated authentication source and preferred QoS network settings
B . Isolated management network and a federated super-user account
C . Separate PKI and encrypted CMP portal access
D . Separate PKI and a separate authentication source

Answer: B