Which of the following could be used to restrict access to the local web server to only certain IP addresses?

Creating an ACL (Access Control List) allows an administrator to define specific rules that permit or deny network traffic based on criteria such as source IP addresses, destination IP addresses, ports, and protocols. By configuring an ACL on a firewall or router, incoming connections to the web server can be restricted to only authorized IP addresses, effectively controlling access and directly addressing the requirement.

Creating an application exception typically refers to allowing an application through a firewall, not restricting access to a service based on specific source IP addresses.

IPSec is primarily used for securing communication with encryption and authentication, not for restricting general access based on source IP addresses.

Blocking port 80 would prevent all access to the web server, which contradicts the goal of allowing access from *certain* IP addresses.