A company has a three-tier web application running on a single server and wants to migrate to AWS following the AWS Well-Architected Framework for security, scalability, and resiliency. Which combination of solutions meets these requirements? (Choose three.)

The correct options provide a robust, scalable, and secure architecture. Creating a VPC across two Availability Zones and refactoring the application into separate tiers (web, application, database) with Auto Scaling groups for web and application tiers enhances scalability and resiliency. Placing Elastic Load Balancers in front of the web tier distributes traffic and improves fault tolerance, while security groups referencing each layer's security groups enforce least privilege. Using an Amazon RDS Multi-AZ cluster in private subnets ensures high availability and durability for the database, with access restricted to the application tier's security group for enhanced security. Incorrect options: Hosting the existing application on a single EC2 instance in each AZ with Auto Scaling groups, without refactoring into tiers, limits scalability and security. Deploying a single Amazon RDS database in a private subnet lacks the high availability and resiliency of a Multi-AZ deployment. Using a single Amazon RDS database, even with restricted access, does not meet the resiliency requirements for a production workload.