One way attackers can bypass a computer system's access controls is to acquire the media used to create backups. Which of the following is recommended to protect that media?

A$.$ Aggressive physical security controls

B$.$ Never keeping backups

C$.$ Keeping backups only on the servers being backed up

D$.$ Aggressive virtual security controls