During a security audit of a new Catalyst 9300 switch, you are asked to reduce the device's attack surface before it is placed into production. The switch currently has its factory-default configuration for management services. Which action most directly hardens the management plane by removing a plaintext, legacy remote-access protocol that transmits credentials in clear text?