A temporary worker must use clientless SSL VPN with an SSH plug-in, in order to access the
console of an internal corporate server, the projects.xyz.com server. For security reasons, the
network security auditor insists that the temporary user is restricted to the one internal corporate
server, 10.0.4.18. You are the network engineer who is responsible for the network access of the
temporary user.
What should you do to restrict SSH access to the one projects.xyz.com server?

A.
Configure access-list temp_user_acl extended permit TCP any host 10.0.4.18 eq 22.

B.
Configure access-list temp_user_acl standard permit host 10.0.4.18 eq 22.

C.
Configure access-list temp_acl webtype permit url ssh://10.0.4.18.

D.
Configure a plug-in SSH bookmark for host 10.0.4.18, and disable network browsing on the
clientless SSL VPN portal of the temporary worker.