To reach a bank web site, the traffic from workstations must pass through a firewall. You have been asked to review the firewall configuration to ensure that workstations in network 10.10.10.0/24 can

This rule correctly identifies the source as the full subnet 10.10.10.0/24, the destination as 10.20.20.1, and port 443, which is the standard port for HTTPS. All three conditions must be satisfied simultaneously to precisely enforce the requirement that only those workstations can reach the bank site exclusively over an encrypted connection.

This rule specifies port 80 (HTTP) instead of port 443 (HTTPS), which would permit unencrypted traffic rather than the required HTTPS-only access.

The source and destination are reversed - 10.20.20.1 is the bank server, not the workstation network, so this rule would match traffic originating from the bank rather than from the workstations.

The source is written as 10.10.10.0 (a single host address) rather than 10.10.10.0/24 (the entire subnet), so only one host would be matched instead of all workstations in the network.