Based on the following links, I think it's A-D-E:
https://docs.aws.amazon.com/elasticloadbalancing/latest/network/target-group-register-targets.html#target-security-groups
https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-troubleshooting.html
Network Load Balancers do not have associated security groups. Therefore, the security groups for your targets must use IP addresses to allow traffic.
You can't use the security groups for the clients as a source in the security groups for the targets. Therefore, the security groups for your targets must use the IP addresses of the clients to allow traffic.
Answer F seems to have changed because it now talks about NACL, but stills makes no sense since it talks about target's NACL, which is ment to be used by the EC2 instances, not for the NLB.
Therefore, ADE is still the correct answer.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
luisfsm_111
Highly Voted 2 years, 5 months agolandsamboni
2 years, 5 months agoToptip
Most Recent 1 year, 11 months agoArtaggedon
2 years, 2 months agosakibmas
2 years, 4 months agoUn1c0rn
2 years, 5 months agoBalki
2 years, 5 months ago