Exam 3V0-21.23 topic 1 question 39 discussion

An architect is updating the design for a vSphere environment.
During a workshop focused on security, the following has been identified:
It has been determined that any configuration of ESXi hosts can only be completed via VMware vCenter
The Direct Console User Interface (DCUI) service must be disabled on ESXi hosts
The SSH service must be disabled on ESXi hosts
Based on the information from the workshop, which element does the architect need to include in the design?