(Choose 2 answers)
Which of the following statements are CORRECT regarding the AWS VPC service? (Select two)
A. A Security Group can have allow rules only
B. A NAT Gateway is managed by AWS
C. A Security Group can have both allow and deny rules
D. A NAT Instance is managed by AWS
E. A NACL can have allow rules only
E12
