Cisco Certified Network Associate (CCNA) 200-301 — Question 1218

Refer to the exhibit. A network engineer must configure the WLC to allow only DHCP and DNS packets for User1 and User2. Which configuration must be used?