A security appliance running on an EC2 instance must inspect all outbound traffic from a VPC to the on-premises datacenter. The network engineer needs to improve network throughput between the on-premises datacenter and the security appliance. Which two actions should the engineer take? (Choose two.)

To improve network throughput for a security appliance on an EC2 instance, two key actions are effective. First, running the EC2 instance on an instance type that supports enhanced networking (e.g., using SR-IOV for Elastic Network Adapter - ENA) significantly boosts network performance by providing higher bandwidth, lower inter-instance latency, and higher packet per second (PPS) rates. Second, resizing the EC2 instance to a larger instance type often provides more dedicated network bandwidth and CPU resources, which are critical for high-throughput network appliances. Routing outbound traffic via a transit gateway is a network design choice for connectivity, not a direct throughput enhancement for a single instance. Placing the EC2 instance in a placement group inside the VPC primarily optimizes latency between instances within the group, not necessarily overall throughput to an external datacenter. Attaching multiple ENIs increases the number of available network interfaces, but doesn't inherently increase the throughput capacity of a single instance beyond what its instance type and enhanced networking capabilities allow.