A Company Is Seeing Access Requests by Some Suspicious IP

Multiple Choice

A company is seeing access requests by some suspicious IP addresses. The security team discovers the requests are from different IP addresses under the same CIDR range. What should a solutions architect recommend to the team?

A) Add a rule in the inbound table of the security to deny the traffic from that CIDR range.
B) Add a rule in the outbound table of the security group to deny the traffic from that CIDR range.
C) Add a deny rule in the inbound table of the network ACL with a lower number than other rules.
D) Add a deny rule in the outbound table of the network ACL with a lower rule number than other rules.