What can be done to secure the virtual terminal interfaces on a router?

What can be done to secure the virtual terminal interfaces on a router? (Choose two.)

A.
Administratively shut down the interface.

B.
Physically secure the interface.

C.
Create an access list and apply it to the virtual terminal interfaces with the access-group
command.

D.
Configure a virtual terminal password and login process.

E.
Enter an access list and apply it to the virtual terminal interfaces using the access-class
command.

Explanation:
It is a waste to administratively shut down the interface. Moreover, someone can still access
the virtual terminal interfaces via other interfaces ->
We can not physically secure a virtual interface because it is “virtual” ->
To apply an access list to a virtual terminal interface we must use the “access-class”
command. The “access-group” command is only used to apply an access list to a physical
interface -> C is not correct.
The most simple way to secure the virtual terminal interface is to configure a username &
password to prevent unauthorized login.