What is the correct format of an access control list on a Cisco Nexus switch to deny hosts on the
172.16.1.0/21 network from accessing HTTP proxy servers listening on port 8080?

A.
N5K-A(config)# ip access-list 101
N5K-A(config-acl)# deny tcp 172.16.1.0 0.0.7.255 any eq 8080
N5K-A(config-acl)# permit ip any any

B.
N5K-A(config)# ip access-list 101
N5K-A(config-acl)# deny tcp any 172.16.1.0 255.255.248.0 eq 8080
N5K-A(config-acl)# permit ip any any

C.
N5K-A(config)#access-list 101 deny tcp172.16.1.0 0.0.15.255 eq 8080

D.
N5K-A(config)# ip access-list 101
N5K-A(config-acl)# deny tcp any host 172.16.1.0/21 eq 8080