正解:B
Option B is the correct answer because it meets both requirements stated in the question. The configuration permits SSH connectivity from a jump host with an IP address of 10.10.10.10/24 and allows all switches to connect via SSH to other devices from the subnet of 10.20.20.0/24.
In this option, the access list acl-1 is configured to permit TCP traffic from host 10.10.10.10/32 (the jump host) on any port, and access list acl-2 is configured to permit TCP traffic from subnet 10.20.20.0/24 on any port.
The 'line vty' configuration applies these access lists for inbound (in) and outbound (out) SSH sessions respectively, ensuring that only the specified source IP addresses are allowed for remote SSH management connectivity1.
References: = For more detailed information, you can refer to the Cisco Nexus 9000 Series NX-OS Security Configuration Guide