How can the ACL statements be re-arranged so that the system works as intended?

Refer to the exhibit.

Statements A, B, C, and D of ACL 10 have been entered in the shown order and applied to
interface E0inbound, to prevent all hosts (except those whose address are the first and last IP of
subnet 172.21.1.128/28) from accessing the network. But as is, the ACL does not restrict anyone
from the network. How can the ACL statements be re-arranged so that the system works as
intended?

A.
CDBA

B.
ACDB

C.
BADC

D.
DBAC

Explanation: