An engineer is configuring web authentication and needs to allow specific protocols to permit DNS traffic. Which type of access list should be used for this configuration?

Reflexive ACLs are used to permit return traffic for sessions initiated from inside the network, not for defining initial outbound traffic for specific protocols.

An extended ACL is required to filter traffic based on specific protocols and port numbers, such as UDP port 53 for DNS. Standard ACLs only filter based on source IP addresses, making them unsuitable for this granular control.

Standard ACLs only filter based on source IP address and cannot specify protocols or port numbers for granular traffic control.

Numbered ACLs can be either standard or extended, but the term 'numbered ACL' itself does not specify the filtering capability required to permit specific protocols and ports.