A company's security policy requires a layered architecture for its business architecture. The security group rules for the application are as follows: Access layer: Users access the application…

A company's security policy requires a layered architecture for its business architecture. The security group rules for the application are as follows: Access layer: Users access the application through the web, protected by security group sg1; Application layer: RESTful APIs accessed from the access layer via HTTPS, protected by security group sg2; Data layer: SQL Server databases accessed from the application layer via port 1433, protected by security group sg3. Which of the following security group rules will allow the application to function securely and properly? (Multiple choice)