Which rule would best fit this requirement?

A company firewall engineer has configured a new DMZ to allow public systems to be located
away from the internal network. The engineer has three security zones set:
Untrust (Internet) – (Remote network = 217.77.88.0/24)
DMZ (DMZ) – (11.12.13.0/24)
Trust (Intranet) – (192.168.0.0/24)
The engineer wants to configure remote desktop access from a fixed IP on the remote network to
a remote desktop server in the DMZ. Which rule would best fit this requirement?

A.
Permit 217.77.88.0/24 11.12.13.0/24 RDP 3389

B.
Permit 217.77.88.12 11.12.13.50 RDP 3389

C.
Permit 217.77.88.12 11.12.13.0/24 RDP 3389

D.
Permit 217.77.88.0/24 11.12.13.50 RDP 3389