An administrator Is setting up a Cisco PMC and must provide expert mode access for a security engineer. The engineer Is permitted to use only a secured out-of-band network workstation with a static IP

"Expert mode" access on a Cisco FMC is typically achieved via SSH to the command-line interface. To restrict this access to a specific workstation, SSH must be enabled, and an access list (or ACL) must be configured on the FMC to allow connections only from the security engineer's static IP address, ensuring secure, controlled administrative access.

HTTP is an insecure protocol and generally not used for administrative access to the FMC's CLI (expert mode); it's typically for the web UI, which is HTTPS.

SCP (Secure Copy Protocol) is used for file transfer, not for interactive expert mode command-line access itself, although it uses SSH for transport.

HTTPS is for the web-based graphical user interface, not "expert mode" (CLI), and SNMP (Simple Network Management Protocol) is for monitoring, not for interactive administrative access.