During a security incident, the security operations team identified sustained network traffic from a malicious IP address: 10.1.4.9. A security analyst is creating an inbound firewall rule to block the IP address from accessing the organization’s network. Which of the following fulfills this request?

The correct option blocks traffic originating from the malicious IP address (10.1.4.9) from reaching any destination within the organization's network. The deny action ensures the traffic is dropped. source 10.1.4.9/32 specifies the exact malicious IP, and destination 0.0.0.0/0 represents all possible destinations, effectively blocking all inbound traffic from that source. The first incorrect option, deny ip source 0.0.0.0/0 destination 10.1.4.9/32, would block all traffic to the IP 10.1.4.9, which is not the goal; the goal is to block traffic from it. The options using permit are incorrect because the objective is to block, not allow, the malicious traffic.