Explanation The expression B matches the required traffic because it uses the IN_SUBNET function to check if the source IP address belongs to the subnet 10.107.149.0/24, and it uses parentheses to group the logical OR condition for the destination port being either UDP or TCP 53. The other expressions are either syntactically incorrect or do not match the subnet correctly. See Policy Expressions and Classic Expressions for more information.