A company runs a three-tier application on AWS that ingests sensor data from user devices. Traffic passes through a Network Load Balancer (NLB) to EC2 instances for the web tier and then to EC2 instances for the application tier, which call a database. What should a solutions architect do to improve the security of data in transit?

Configuring a TLS listener on the Network Load Balancer (NLB) and deploying a server certificate directly addresses the security of data in transit by encrypting communication between the client and the NLB. This ensures that sensor data is protected as it enters the AWS environment. AWS Shield Advanced and AWS WAF protect against DDoS attacks and web exploits, respectively, but do not encrypt data in transit at the NLB level. Changing to an Application Load Balancer (ALB) would allow for TLS termination, but an NLB can also handle TLS, and the question specifically asks to improve security of data in transit with the existing NLB. Encrypting EBS volumes protects data at rest, not data in transit.