What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?

What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?
A . Both Source and Destination Checks are disabled
B . Both Source and Destination Checks are enabled
C . Source Check is disabled and Destination Check is enabled
D . Source Check is enabled and Destination Check is disabled

Answer: A

Explanation:

https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/use-case-secure-the-ec2-instances-in-the-aws-cloud