Refer to the exhibit. A network administrator must configure router B to allow traffic only from network 10.100.2.0 to networks outside of router B. Which configuration must be applied?

Applying the access list with ip access-group 101 in would filter traffic entering the Gi0/1 interface, which is the opposite direction needed to control traffic leaving Router B towards external networks.

This option incorrectly specifies the source network as 10.100.3.0 instead of the required 10.100.2.0 for the permit statement.

Choice C is identical to choice D and is also a correct configuration, making D also correct.

The command access-list 101 permit ip 10.100.2.0 0.0.0.255 any creates a standard access list that explicitly allows traffic originating from the 10.100.2.0/24 network. Applying this access list with ip access-group 101 out on the appropriate outbound interface (e.g., Gi0/1) ensures that only traffic from this specific source network is permitted to leave Router B towards external networks, while implicitly denying all other traffic due to the implicit deny any at the end of every access list.