Which solution will meet this requirement?

A SysOps administrator receives an alert from Amazon GuardDuty about suspicious network activity on an Amazon FC2 instance. The GuardDuty finding lists a new external IP address as a traffic destination. The SysOps administrator does not recognize the external IP address. The SysOps administrator must block traffic to the external IP address that GuardDuty identified

Which solution will meet this requirement?
A . Create a new security group to block traffic to the external IP address. Assign the new security group to the EC2 instance
B. Use VPC flow logs with Amazon Athena to block traffic to the external IP address
C. Create a network ACL Add an outbound deny rule tor traffic to the external IP address
D. Create a new security group to block traffic to the external IP address Assign the new security group to the entire VPC

View Answer

Answer: A