You are responsible for your company's AWS resources, and you notice a significant amount of traffic from an IP address in a foreign country in which your company does not have customers. Further investigation of the traffic indicates the source of the traffic is scanning for open ports on your EC2-VPC instances.
Which one of the following resources can deny the traffic from reaching the instances?A. Security group
B. Network ACL
C. NAT instance
D. An Amazon VPC endpoint
Answer: B