Refer to the exhibit. You want to restrict access from Host B. Where do you apply the ACL?

A VTY ACL restricts remote management sessions (SSH or Telnet) to the router itself and has no effect on data plane traffic forwarded through the router.

Applying the ACL only outbound blocks traffic leaving the router toward other networks but does not prevent Host B's packets from entering and being processed by the router.

Applying the ACL only inbound blocks Host B's outgoing traffic from entering the router but does not restrict traffic flowing back toward Host B's network segment.

Applying the ACL on the inbound interface blocks Host B's packets as they enter the router, while applying it on the outbound interface blocks return or other traffic destined back toward Host B's network segment. Using only one direction leaves a gap, allowing either Host B's outgoing traffic or traffic flowing toward Host B to pass unchecked.