A cloud administrator is managing an organization's infrastructure in a public cloud. All servers are currently located in a single virtual network with a single firewall that all traffic must pass through. Per security requirements, production, QA, and development servers should not be able to communicate directly with each other. Which of the following should an administrator perform to comply with the security requirement?

A. Create separate virtual networks for production, QA, and development servers.
Move the servers to the appropriate virtual network.
Apply a network security group to each virtual network that denies all traffic except for the firewall.
B. Create separate network security groups for production, QA, and development servers.
Apply the network security groups on the appropriate production, QA, and development servers.
Peer the networks together.
C. Create separate virtual networks for production, QA, and development servers.
Move the servers to the appropriate virtual network.
Peer the networks together.
D. Create separate network security groups for production, QA, and development servers.
Peer the networks together.
Create static routes for each network to the firewall.