You are troubleshooting connectivity between application servers and database servers running on Amazon EC2. Which AWS services or tools should you use to help identify the faulty component? (Choose two.)

Amazon VPC Flow Logs capture detailed information about IP traffic going to and from network interfaces in your VPC. This data includes source and destination IP addresses, ports, and the action (ACCEPT or REJECT), which is crucial for identifying if traffic is reaching its destination or being blocked at the network level. Network access control lists (network ACLs) are stateless firewalls that control traffic at the subnet level. Examining the rules configured in network ACLs can quickly reveal if specific ports or IP ranges are being explicitly denied, preventing communication between the application and database servers. AWS CloudTrail records API calls, which is useful for auditing actions taken on resources but not for troubleshooting live network traffic. AWS Trusted Advisor provides recommendations for cost optimization, security, and performance but doesn't offer real-time network flow data. AWS Config rules evaluate resource configurations against desired settings and are not designed for network connectivity troubleshooting.