An engineer configures remote access to a router from subnet 10.139.58.0/28. Domain name, crypto keys, and SSH are configured. Which destination-router configuration permits the traffic?

The correct option uses an extended ACL (110) to permit SSH (port 22) traffic from the source subnet 10.139.58.0/28 (wildcard mask 0.0.0.15) to the router's interface IP address 10.122.49.1. The ip access-group 110 in command correctly applies the ACL to inbound traffic on the interface. The second option is incorrect because the wildcard mask 255.255.255.248 is not valid for a /28 subnet and any is used instead of the specific destination host. The third option is incorrect because a standard ACL (105) cannot filter by destination port or protocol, and the wildcard mask 0.0.0.7 is incorrect for a /28 subnet. The fourth option is incorrect because it uses a standard ACL, specifies UDP instead of TCP for SSH, and has an incorrect wildcard mask.