After an Amazon VPC instance is launched, can I change the VPC security groups it belongs to?

A.
No. You cannot.

B.
Yes. You can.

C.
Only if you are the root user.

D.
Only if the tag “VPC_Change_Group” is true.

Explanation:
Security groups are associated with network interfaces. After you launch an instance, you can change the
security groups associated with the instance, which changes the security groups associated with the primary
network interface (eth0).