Refer to the exhibit. You are configuring an extended access list to permit a reply from Destination Server B to Source Host A for HTTP traffic. Which extended access list should you implement on the

Placing 'eq www' after the destination matches destination port 80, which would permit a new outbound request to Server B rather than a reply originating from Server B's port 80.

When Server B (209.165.200.230) replies to an HTTP request, the TCP segment originates from source port 80 (www) on Server B and is destined for Host A (209.165.202.130). The extended ACL syntax is 'permit tcp <source> [eq <port>] <destination>', so 'permit tcp host 209.165.200.230 eq www host 209.165.202.130' correctly matches Server B as the source with source port 80 sending to Host A.

This reverses the source and destination - it permits Host A (209.165.202.130) to send traffic to Server B on destination port 80, which is the original outbound request, not the return reply.

This matches Host A as the source with source port 80 destined for Server B, which is nonsensical for a reply and has both source/destination reversed from the correct direction.