Ingress ACL rules typically permit a specific type of externally originated connection to network resources.

• A. Externally originated connections are always blocked by inbound ACLs
• B. Ingress ACL rules typically permit a specific type of externally originated connection to network resources
• C. Ingress ACL rules are used only for outbound traffic
• D. Ingress ACL rules do not rely on the source address

Answer: (B)

Ingress access control lists regulate traffic entering a network edge. They are typically configured to permit only a specific type of externally originated connection to internal resources, such as allowing a defined service (like a web server) from outside while denying other external connections. This selective permission helps protect resources by exposing only the necessary access.

It's not that inbound traffic is always blocked—often there are explicit permits for essential services. Ingress ACLs are not used only for outbound traffic; outbound control is handled by egress ACLs. And they do rely on the source address to determine where the traffic originated, which helps distinguish external from internal sources.