Which action protects against port scans from the internet?

Apply App-ID Security policy rules to block traffic sourcing from the untrust zone.

Assign Security profiles to Security policy rules for traffic sourcing from the untrust zone.

Apply a Zone Protection profile on the zone of the ingress interface.

Assign an Interface Management profile to the zone of the ingress surface.