A Network Administrator Assists with the Migration of a WLAN

A network administrator assists with the migration of a WLAN from a third-party vendor to Aruba in different locations throughout the country. In order to manage the solution from a central point, the network administrator decides to deploy redundant Mobility Masters (MMs) in a datacenter that are reachable through the Internet. Since not all locations own public IP addresses, the security team is not able to configure strict firewall policies at the datacenter without disrupting some MM to Mobility Controller (MC) communications. They are also concerned about exposing the MMs to unauthorized inbound connection attempts. What should the network administrator do to ensure the solution is functional and secure?

A) Deploy an MC at the datacenter as a VPN concentrator.
B) Block all ports to the MMs except UDP 500 and 4500.
C) Install a PEFV license, and configure firewall policies that protect the MM.
D) Block all inbound connections, and instruct the MM to initiate the connection to the MCs.