A Company Has a Three-Tier Environment on AWS That Ingests

Multiple Choice

A company has a three-tier environment on AWS that ingests sensor data from its users' devices. The traffic flows through a Network Load Balancer (NLB) then to Amazon EC2 instances for the web tier, and finally toEC2 instances for the application tier that makes database calls. What should a solutions architect do to improve the security of data in transit to the web tier?

A) Configure a TLS listener and add the server certificate on the NLB.
B) Configure AWS Shield Advanced and enable AWS WAF on the NLB.
C) Change the load balancer to an Application Load Balancer and attach AWS WAF to it.
D) Encrypt the Amazon Elastic Block Store (Amazon EBS) volume on the EC2 instances using AWS Key Management Service (AWS KMS) .