Which of the following security controls are MOST effective when a router only supports local configuration changes via serial console? (Select TWO)