An application is currently secured using network access control lists and security groups. Web servers are located in public subnets behind an Application Load...

An application is currently secured using network access control lists and security groups. Web servers are located in public subnets behind an Application LoadBalancer (ALB); application servers are located in private subnets.
How can edge security be enhanced to safeguard the Amazon EC2 instances against attack? (Choose two.)