How can Netflow be used to help identify a day-zero scanning worm?

A.
Netflow tracks destination address.

B.
Netflow protects against unknown virus attacks.

C.
Netflow statistics can show a huge increase in traffic on a specific day.

D.
Netflow makes sure that only the correct applications are using their designated ports.

E.
Netflow prevents buffer overflow attacks.