A network administrator is tasked to block all outbound SSH connections on the default port from a network subnet of 10.152.8.0/21 on a Linux based firewall. Which of the following rule sets would…

This rule correctly targets the OUTPUT chain (for outbound traffic), specifies the destination subnet 10.152.8.0/21, uses TCP protocol on port 22 (the default SSH port), and applies the REJECT action to actively block and notify the sender. Together these parameters precisely match the stated requirement to block outbound SSH from that subnet.

Port 23 is the default port for Telnet, not SSH, so this rule would block outbound Telnet rather than SSH connections.

Using the ACCEPT target allows traffic through instead of blocking it, which is the opposite of the stated goal.

This rule uses the wrong port (23 - Telnet) and the ACCEPT target, so it neither targets SSH nor blocks any traffic.