To Allow All Traffic to Access an Instance in "Subnet

Multiple Choice

To allow all traffic to access an instance in "Subnet 1" that uses "Security Group 1", what two options need to be configured? (Choose two.)

A) NACL rule allowing 0.0.0.0/0 to access "Subnet 1"
B) Security Group rule in "Security Group 1" that allows 0.0.0.0/0 inbound
C) Security Group rule in "Security Group 1" that allows outbound traffic to 0.0.0.0/0
D) NACL rule allowing 0.0.0.0/0 to access "Security Group 1"