Exam AWS Certified Cloud Practitioner topic 1 question 663 discussion

A. Security groups D. Network ACLs below info for A. Security groups "When you create a VPC, it comes with a default security group. You can create additional security groups for each VPC." https://docs.aws.amazon.com/vpc/latest/userguide/vpc-security-groups.html below info for D. Network ACLs "A network access control list (ACL) allows or denies specific inbound or outbound traffic at the subnet level. You can use the default network ACL for your VPC, or you can create a custom network ACL for your VPC with rules that are similar to the rules for your security groups in order to add an additional layer of security to your VPC." https://docs.aws.amazon.com/vpc/latest/userguide/vpc-network-acls.html

AD is correct

AD for sure

Security Groups and Network ACLs are built in ways to control VPC's and their traffic both inbound and outbound.