What else should be configured to limit telnet access to the ScreenOS devie from trusted management PCs?

Telnet management has been enabled on an interface in the untrust zone. What else should be configured to limit telnet access to the ScreenOS devie from trusted management PCs?

A.
Define a manage IP address on this interface

B.
Define a policy from trust tountrust

C.
Define a permitted IP address

D.
Define a trusted IP in the address table