A two-tier ecommerce website runs on AWS. The web tier uses a load balancer that forwards traffic to Amazon EC2 instances. The database tier uses an Amazon RDS DB instance. The EC2 instances and the RDS DB instance must not be exposed to the public internet. The EC2 instances require internet access to complete payment processing through a third-party web service. The application must be highly available. Which combination of configuration options will meet these requirements? (Choose two.)

The first correct option ensures the EC2 instances and RDS DB instance are not publicly exposed by placing them in private subnets. An Auto Scaling group provides high availability for the EC2 instances. A Multi-AZ RDS deployment ensures high availability for the database. The second correct option configures the VPC with public subnets for the Application Load Balancer to receive internet traffic, and private subnets for the EC2 instances and RDS DB instance, ensuring they are not directly exposed. Two NAT gateways across two Availability Zones provide internet access for the private subnets (for payment processing) and high availability for the NAT service. An Application Load Balancer in public subnets distributes traffic to the private EC2 instances. The incorrect option "Configure a VPC with two private subnets and two NAT gateways across two Availability Zones. Deploy an Application Load Balancer in the private subnets" is wrong because an Application Load Balancer that needs