How would Update Manager be configured in this environment while maintaining the organization’s security requirements?

An administrator needs to use vSphere Update Manager to perform orchestrated upgrades of
ESXi hosts and virtual machines. The vSphere management components reside in a secure
environment that does not have direct access to the Internet.
How would Update Manager be configured in this environment while maintaining the
organization’s security requirements?

A.
Install Update Manager Download Service on a machine with Internet access and configure an
export policy to the Update Manager server.

B.
Install Update Manager Secure Gateway on a machine in the DMZ and configure an IPsec
tunnel to the internal Update Manager server.

C.
Create a TFTP server as an HTTP proxy and configure an export policy to the Update Manager
server.

D.
Enable gateway services on the Update Manager server and provide Internet access to the
gateway address.

Explanation: