Which of the following statements on NAT gateways is incorrect?

Answer options:

A.A NAT gateway supports bursts of up to 10 Gbps of bandwidth
B.You can associate exactly one Elastic IP address with a NAT gateway
C.You can associate a security group with a NAT gateway.
D.A NAT gateway supports the TCP and UDP protocol

Answer - C
The AWS documentation mentions the following on NAT gateways
A NAT gateway has the following characteristics:
· A NAT gateway supports bursts of up to 10 Gbps of bandwidth. If you require more than 10 Gbps bursts, you can distribute the workload by splitting your resources into multiple subnets, and creating a NAT gateway in each subnet.
· You can associate exactly one Elastic IP address with a NAT gateway. You cannot disassociate an Elastic IP address from a NAT gateway after it`s created. To use a different Elastic IP address for your NAT gateway, you must create a new NAT gateway with the required address, update your route tables, and then delete the existing NAT gateway if it`s no longer required.
· A NAT gateway supports the following protocols: TCP, UDP, and ICMP.
· You cannot associate a security group with a NAT gateway. You can use security groups for your instances in the private subnets to control the traffic to and from those instances.
 For more information on NAT gateways, please visit the below URL:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpc-nat-gateway.html