What properties of an Amazon VPC must be specified at the time of creation? (Choose 2 answers)
A. The CIDR block representing the IP address range
B. One or more subnets for the Amazon VPC
C. The region for the Amazon VPC
D. Amazon VPC Peering relationships
You are responsible for your company's AWS resources, and you notice a significant amount of traffic from an IP address in a foreign country in which your company does not have customers. Further investigation of the traffic indicates the source of the traffic is scanning for open ports on your EC2-VPC instances.
Which one of the following resources can deny the traffic from reaching the instances?
A. Security group
B. Network ACL
C. NAT instance
D. An Amazon VPC endpoint