What could be responsible for the connection failure?

Authorized Administrators are unable to connect to an Amazon EC2 Linux bastion host using SSH over the internet. The connection either fails to respond or generates the following error message:

Network error: Connection timed out.

What could be responsible for the connection failure? (Select THREE)
A . The NAT gateway in the subnet where the EC2 instance is deployed has been misconfigured
B . The internet gateway of the VPC has been reconfigured
C . The security group denies outbound traffic on ephemeral ports
D . The route table is missing a route to the internet gateway
E . The NACL denies outbound traffic on ephemeral ports
F . The host-based firewall is denying SSH traffic

Answer: C,E,F