Which two settings allow you to restrict access to the management interface? (Choose two )

Enabling the Content-ID filter within a security policy applied to management-bound traffic can detect and prevent the transmission of malicious content or unauthorized data patterns, thereby restricting compromised access attempts.

Administrative management services directly control which protocols (e.g., HTTPS, SSH) are enabled on the management interface, offering explicit access restriction.

Restricting HTTP and Telnet using App-ID can prevent these specific (often insecure) management applications from being used to access the management interface if traffic to that interface is subject to App-ID-based security policies.

Permitted IP addresses directly specify allowed source IP addresses for management access, providing an explicit and direct method of restriction.