After an EC2-VPC instance is launched, can I change the VPC security groups it belongs to?

A.
Only if the tag “VPC_Change_Group” is true

B.
Yes

C.
No

D.
Only if the tag “VPC Change Group” is true

Explanation:
Security groups are associated with network interfaces. After you launch an instance, you can change the
security groups associated with the instance, which changes the security groups associated with the primary
network interface (eth0). You can also change the security groups associated with any other network interface.
For more information about network interfaces, see Elastic Network Interfaces.