You$$re using a public$-$facing application load balancer to forward traffic to EC$2$ instances in an Auto Scaling group. What can you do to ensure users on the Internet can reach the load balancer over HTTPS without reaching your instances directly? $($Choose two.$)$

Group of answer choices

Attach the security group to the instances.

Attach the security group to the load balancer.

Remove the Internet gateway from the VPC$.$

Create a security group that allows all inbound traffic to TCP port $443.$

Create a security group that allows all inbound traffic to TCP port $80.$