Which of the following is incorrect when it comes to the NAT gateway

Answer options:

A.You can associate a security group with the NAT gateway
B.A NAT gateway supports bursts of up to 10 Gbps of bandwidth
C.You can associate exactly one Elastic IP address with a NAT gateway
D.A NAT gateway supports the following protocols: TCP, UDP, and ICMP

Answer - A
The AWS documentation mentions the following
A NAT gateway has the following characteristics:
A NAT gateway supports bursts of up to 10 Gbps of bandwidth. If you require more than 10 Gbps bursts, you can distribute the workload by splitting your resources into multiple subnets, and creating a NAT gateway in each subnet.
You can associate exactly one Elastic IP address with a NAT gateway. You cannot disassociate an Elastic IP address from a NAT gateway after it`s created. To use a different Elastic IP address for your NAT gateway, you must create a new NAT gateway with the required address, update your route tables, and then delete the existing NAT gateway if it`s no longer required.
A NAT gateway supports the following protocols: TCP, UDP, and ICMP.
You cannot associate a security group with a NAT gateway. You can use security groups for your instances in the private subnets to control the traffic to and from those instances.
For more information on the NAT gateway, please refer to the below link:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpc-nat-gateway.html