Which two security configurations will help meet this requirement?

An organization’s security policy requires a design where the ESXi hosts will be manageable only through vCenter Server.

Which two security configurations will help meet this requirement? (Choose two)
A . enable lockdown mode strict
B . disable DCUI access
C . enable lockdown mode normal
D . disable shell access

Answer: AD

Explanation:

https://pubs.vmware.com/vsphere-50/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc_50%2FGUID-94F0C54F-05E3-4E16-8027-0280B9ED1009.html