The security administrator needs to restrict traffic on a layer 3 device to support FTP from a new remote site. Which of the following secure network administration principles will need to be…

Implicit deny is the default behavior at the end of an ACL, not a standalone technique that is separately implemented to restrict traffic.

VLAN management operates at Layer 2 and does not provide protocol- or port-based traffic filtering on Layer 3 devices.

Port security is a Layer 2 switch feature that restricts access based on MAC addresses, not used for protocol or IP-based traffic filtering on Layer 3 devices.

ACLs are configured on Layer 3 devices (routers and multilayer switches) to permit or deny traffic based on criteria such as source/destination IP, protocol, and port number. To allow FTP from a specific remote site, an ACL entry explicitly permitting TCP ports 20 and 21 from the remote site's subnet would be applied to the interface.