How should an administrator securely manage an AP operating in lightweight mode?

Lightweight Access Points (LAPs) are centrally managed by a Wireless LAN Controller (WLC). Therefore, to securely manage a LAP, the administrator should access the WLC's Graphical User Interface (GUI) using HTTPS for encrypted communication. This allows configuration changes to be pushed to the LAPs. Incorrect options: LAPs in lightweight mode do not have independent GUIs for direct management. While CLI management of the WLC is possible, the question specifically asks about managing the AP, which is done through the WLC. Out-of-band connections are generally for direct device access, which isn't how LAPs are managed. LAPs don't typically have a directly accessible virtual interface for SSH management; their management plane is abstracted by the WLC.