Which explanation of this behavior is true?

Refer to the exhibit.

An engineer must block all traffic from a router to its directly connected subnet 209.165.200.0/24. The engineer applies access control list EGRESS in the outbound direction on the GigabitEthernet0/0 interface of the router However, the router can still ping hosts on the 209.165.200.0/24 subnet.

Which explanation of this behavior is true?
A . Access control lists that are applied outbound to a router interface do not affect traffic that is sourced from the router.
B . Only standard access control lists can block traffic from a source IP address.
C . After an access control list is applied to an interface, that interface must be shut and no shut for the access control list to take effect.
D . The access control list must contain an explicit deny to block traffic from the router.

View Answer

Answer: A

Explanation:

Access control lists that are applied outbound on a router interface do not affect traffic that is sourced from the router itself. This means even if an ACL is applied to block certain types of outgoing traffic, it won’t block pings or other types of traffic originating from the router itself.

References: Implementing and Operating Cisco Service Provider Network Core Technologies