Which of the following statements on VPC Flow Logs is incorrect?

Answer options:

A.You cannot change the configuration of the flow logs once created.
B.You can create a flow log for a VPC, a subnet, or a network interface.
C.Flow log data is published to a log group in CloudWatch Log.
D.The log data is captured in real time.

Answer - D
The AWS documentation mentions the following on VPC Flow Logs
A flow log record represents a network flow in your flow log. Each record captures the network flow for a specific 5-tuple, for a specific capture window. A 5-tuple is a set of 5 different values that specify the source, destination, and protocol for an Internet protocol (IP) flow. The capture window is the duration of time during which the flow logs service aggregates data before publishing flow log records. The capture window is approximately 10 minutes but can take up to 15 minutes. 
For more information on VPC Flow Logs, please refer to the below URL:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/flow-logs.html