Which of the Following Requirements Is Part of the "Implement

Which of the following requirements is part of the "Implement strong access control measures" PCI DSS core principle?

A) Restrict access to cardholder data by business need-to know.
B) Develop and maintain secure systems and applications.
C) Protect all systems against malware and regularly update antivirus software.
D) Encrypt transmission of cardholder data across open, public networks.