Which of the following statements on the egress-only Internet gateway is incorrect

Answer options:

A.An egress-only Internet gateway is stateful
B.You can associate a security group with an egress-only Internet gateway
C.You can use a network ACL to control the traffic to and from the subnet for which the egress-only Internet gateway routes traffic
D.An egress-only Internet gateway is for use with IPv6 traffic only

Answer - B
The AWS documentation mentions the following on egress-only Internet gateway
An egress-only Internet gateway is stateful: it forwards traffic from the instances in the subnet to the Internet or other AWS services, and then sends the response back to the instances.
An egress-only Internet gateway has the following characteristics:
You cannot associate a security group with an egress-only Internet gateway. You can use security groups for your instances in the private subnet to control the traffic to and from those instances.
You can use a network ACL to control the traffic to and from the subnet for which the egress-only Internet gateway routes traffic.
 For more information on the egress only internet gateway , please refer to the below URL:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/egress-only-internet-gateway.html