Which mitigation MOST reduces exposure of an internal admin portal to internet attacks?

1. AChange the portal's color scheme
2. BAdd more images to the page
3. CPublish the URL widely
4. DRestrict access to VPN or internal networks