A company is running an Amazon EC2 instance in a VPC.
Which of the following can the company use to route and filter incoming network requests for the EC2 instance?

A. Route tables and web application firewalls
B. Security groups and route tables
C. Security groups and a network intrusion system
D. Route tables and AWS Shield