An engineer must advertise a selection of external networks learned from a BGP neighbor into the ACI fabric. Which L3Out subnet configuration option creates an inbound route map for route filtering?

External Subnets for the External EPG defines the subnets that belong to the external EPG and are used for contract enforcement, not for inbound route filtering from an external neighbor.

Shared Route Control Subnet is used for advertising L3Out routes into multiple VRFs within the ACI fabric, typically for route leaking purposes, not for inbound filtering.

The "Import Route Control Subnet" option in an ACI L3Out subnet configuration is specifically designed to create an inbound route map. This route map applies to routes learned from external routing protocols like BGP, allowing an administrator to filter which specific external networks are imported and advertised into the ACI fabric.

Shared Security Import Subnet is related to security policies and shared services between VRFs, not primarily for filtering routes learned from an external BGP neighbor.