To allow only hosts in 203.0.113.0/24 to manage a Catalyst switch while permitting transit traffic, which two router configurations are required? (Choose two.)

The correct options define a standard access list and apply it to the VTY lines. The ip access-list standard Management permit 203.0.113.0 0.0.0.255 command creates a standard access list named "Management" that permits traffic from the 203.0.113.0/24 network. The wildcard mask 0.0.0.255 correctly identifies all hosts within that /24 subnet. The line vty 0 15 access-class Management in command then applies this access list to the VTY lines (used for Telnet/SSH access) in the inbound direction, restricting management access to only the allowed subnet. The incorrect options are: interface range vlan 1 - 4094 ip access-group Management out would apply the access list to VLAN interfaces, potentially blocking transit traffic, which is not desired. ip access-list standard Management permit 203.0.113.0 255.255.255.0 uses an incorrect wildcard mask for a /24 network; it should be 0.0.0.255. ip access-list extended Management permit tcp any range 22 23 203.0.113.0 0.0.0.255 creates an extended access list, which is unnecessary for simply restricting source IP addresses for management access, and the syntax for specifying destination IP and ports is incorrect for this purpose.