如果利用高级ACL来识别源IP地址为172.16.10.1且目的IP地址是172.16.20.0/24网段的IP报文并执行“拒绝”的动作,那么应该采用下面哪一条规则?( )
A. rule deny source 172.16.10.1 0.0.0.0
B. rule deny source 172.16.10.1 0.0.0.0 destination 172.16.20.0 0.0.0.255
C. rule deny tcp source 172.16. 10. 1 0.0.0.0 destination 172.16.20.0 0.0.0.255
D. rule deny ip source 172. 16.10. 1 0.0.0.0 destination 172.16.20.0 0.0.0.255