A security analyst is reviewing the following packet capture of an attack directed at a companys server located in the DMZ:

Which of the following ACLs provides the BEST protection against the above attack and any further attacks from the same IP, while minimizing service interruption?

A. DENY TCO From ANY to 172.31.64.4

B. Deny UDP from 192.168.1.0/24 to 172.31.67.0/24

C. Deny IP from 192.168.1.10/32 to 0.0.0.0/0

D. Deny TCP from 192.168.1.10 to 172.31.67.4