Firewall PBQs: Implementing and Operating Cisco Security Core Technologies (SCOR 350-701)

You are a network security engineer reviewing the ACL applied to a Cisco ASA firewall's outside interface. A recent security audit found that Telnet (port 23) is permitted from any source into the DMZ server subnet (10.2.0.0/24). Company policy requires that only SSH (port 22) be allowed for remote management, and only from the internal management subnet (10.0.0.0/8). Review the current rules and correct the misconfigurations.