Which of the below mentioned ways can be used to provide additional layers of protection to all your EC2 resources. Choose the correct answer from the options below

Answer options:

A.Add policies which have deny and/or allow permissions on tagged resources
B.Ensure that the proper tagging strategies have been implemented to identify all of your EC2 resources.
C.Add an IP address condition to policies that specify that requests to EC2 instances should come from a specific IP address or CIDR block range.
D.All actions listed here would provide additional layers of protection.

Answer – D
Option B is correct because tagging can allow one to understand which resources below to test, development and production environment if done properly.Tags enable you to categorize your AWS resources in different ways, for example, by purpose, owner, or environment. This is useful when you have many resources of the same type — you can quickly identify a specific resource based on the tags you`ve assigned to it. Each tag consists of a key and an optional value, both of which you define
Option A is right because it adds on top on that. If you have tagging, you can then also allow permissions based on the tagging.
For more information on tagging please see the below link:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html