what configuration can ensure both prevention of ntp spoofing and accurate time ensured?

In IOS routers, what configuration can ensure both prevention of ntp spoofing and accurate time
ensured?

A.
ACL permitting udp 123 from ntp server

B.
ntp authentication

C.
multiple ntp servers

D.
local system clock