AWS Certified Advanced Networking – Specialty ANS-C00 – Question406

A company runs a web application on an Amazon EC2 instance. The application experiences performance issues for a short period at the same time every day. To diagnose the issue, the application vendor needs a packet capture of the web application network interface. The company's network administrator does not have SSH access to the instance.
Which solution will meet these requirements?

A.
Use Traffic Mirroring. Create a new EC2 instance, and use its network interface as the traffic mirror target. Add a rule to the new instance's security group to allow UDP port 4789 inbound traffic.
B. Use Traffic Mirroring. Enable enhanced networking support on the elastic network interface. Stream the packet capture to an Amazon Kinesis data stream.
C. Use VPC Flow Logs. Enable enhanced networking support on the elastic network interface. Stream packets to Amazon CloudWatch Logs.
D. Use VPC Flow Logs. Disable source/destination checks on the instance. Stream packets to Amazon CloudWatch Logs.