Which configuration represents a valid use of security groups in a virtual private cloud

$($VPC$)?$

Set a deny rule that prevents access to the subnet from the public internet.

Limit outbound traffic from an Amazon EC$2$ instance in the VPC to a specific

database server.

Limit inbound access to the private subnet of the VPC$.$

Set a deny rule that prevents outbound traffic from an Amazon EC$2$ instance in a

VPC$.$