Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)

Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)
A . iLB-as-next-hop
B . transit gateway and security VPC with VM-Series
C . traditional active/standby HA on VM-Series
D . transit VPC and security VPC with VM-Series

Answer: B,C