Cisco Exam 350-601 Topic 15 Question 90 Discussion

Option B is the correct answer because it meets both requirements stated in the question. The configuration permits SSH connectivity from a jump host with an IP address of 10.10.10.10/24 and allows all switches to connect via SSH to other devices from the subnet of 10.20.20.0/24.

In this option, the access list acl-1 is configured to permit TCP traffic from host 10.10.10.10/32 (the jump host) on any port, and access list acl-2 is configured to permit TCP traffic from subnet 10.20.20.0/24 on any port.

The 'line vty' configuration applies these access lists for inbound (in) and outbound (out) SSH sessions respectively, ensuring that only the specified source IP addresses are allowed for remote SSH management connectivity1.