An Organization Has Created Multiple Components of a Single Application

Multiple Choice

An organization has created multiple components of a single application for compartmentalization. Currently all the components are hosted on a single EC2 instance. Due to security reasons the organization wants to implement two separate SSLs for the separate modules although it is already using VPC. How can the organization achieve this with a single instance?

A) You have to launch two instances each in a separate subnet and allow VPC peering for a single IP.
B) Create a VPC instance which will have multiple network interfaces with multiple elastic IP addresses.
C) Create a VPC instance which will have both the ACL and the security group attached to it and have separate rules for each IP address.
D) Create a VPC instance which will have multiple subnets attached to it and each will have a separate IP address.