A. a Security group rules are always permissive: you cannot create rules that deny access.

B. Security groups are statetul

C. When associate multiple security groups With an instance, the rules from each security group are effectively aggregated to create one set Of rules

D. By default, security groups block all outbound traffic.

E. By default,security groups allow all inbound traffic.