A company's security policy requires that the business architecture be deployed in a layered architecture, and the application sets the security group rules as follows: access layer users are accessed through Web and protected by security group sg1; The application layer, accessed from the RESTFU through HTTPS from access lAPI, protected by security group sg2; The data layer, accessed from the application layer through port 1433

sQLServer database, protected by security group sg3; Which of the following security group rules will allow the application to be secure and functional? Multiple selection