Following an internal security audit of the new VMware Cloud Foundation (VCF) instance, the following audit finding was documented for priority remediation:

● All users from the custom administrators group could access the Direct Console User Interface (DCUI) on all ESXi hosts within the workload domain. RISK=High, IMPACT=High

The company IT security policy around accessing ESXi servers states the following:

● Users within the custom administrators group must access ESXi host configurations from within vCenter Server or the vSphere Web Client only.

● Only users within the restricted administrators group must be allowed direct access to ESXi hosts.

Which two actions should the administrator perform on each of the hosts within the workload domain to remediate the security finding? (Choose two.)