A VPN has been setup between AWS and the on-premise network. An EC2 Instance is launched in the VPC to test the connection via the ping command from on-premises. Which of the below must be done to ensure the test works as desired. Choose 3 answers from the options given below.

Answer options:

A.Ensure the Security Groups allow Inbound ICMP traffic
B.Ensure the Security Groups allow Outbound ICMP traffic
C.Ensure that the NACL allows Inbound ICMP traffic
D.Ensure that the NACL allows Outbound ICMP traffic

Answer – A,C and D
After you create the VPN connection and configure the customer gateway, you can launch an instance and test the connection by pinging the instance. You need to use an AMI that responds to ping requests, and you need to ensure that your instance`s security group is configured to enable inbound ICMP. 
Remember that Security Groups are stateful in nature, so you don’t need to ensure that Outbound traffic is allowed.
For more information on test VPN connections, please refer to the below URL:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/HowToTestEndToEnd_Linux.html