Option B satisfies every stated control. A 900-second session timeout equals 15 minutes, meeting the maximum-time requirement. HTTP-to-HTTPS redirection automatically moves attempts using unencrypted HTTP to the encrypted HTTPS service. SSH provides encrypted CLI management, and port 2022 is a nondefault port rather than the standard TCP port 22. Option A permits a 1,200-second timeout, which exceeds the 15-minute maximum, and enabling IPMI over LAN may expose an additional management service. Option C does not specify the required session timeout or automatic HTTP redirection. Option D leaves an unencrypted HTTP service enabled and does not provide the required SSH-based CLI configuration. The configuration in B therefore combines encrypted browser management, automatic redirection, the required timeout, and nondefault encrypted CLI access.