What is the purpose of an access list that is created as part of configuring IP address translation?

Question:
What is the purpose of an access list that is created as part of configuring IP address translation?

• The access list defines the valid public addresses for the NAT or PAT pool.
• The access list defines the private IP addresses that are to be translated.
• The access list prevents external devices from being a part of the address translation.
• The access list permits or denies specific addresses from entering the device doing the translation.

Exam with this question: CCNA 2 (v5.0.3 + v6.0) Final Exam Answers