Which IOS feature can limit SSH access to a specific subnet under a VTY line?

Which IOS feature can limit SSH access to a specific subnet under a VTY line?
A. access class
B. access list
C. route map
D. route tag