AWS recently notified a customer that malware is being spread over the internet by a compromised EC$2$ instance. The EC$2$ instance was running in a public subnet and an application vulnerability had been exploited by an attacker. The application has since been patched.

The company needs the ability to identify when an application that is deployed on an EC$2$ instance is spreading malware.

Which solution will meet this requirement with the LEAST operational effort?

A$.$ Create a Network Load Balancer. Run an intrusion prevention system $($IPS$)$ appliance from the AWS Marketplace for traffic inspection.

B$.$ Configure Amazon GuardDuty to process VPC Flow Logs and identify anomalous traffic patterns indicating malware spread.

C$.$ Create a Gateway Load Balancer. Run an intrusion detection system $($IDS$)$ appliance from the AWS Marketplace for traffic inspection.

D$.$ Configure Amazon Inspector to perform deep packet inspection of outgoing traffic to identify malware.