If you go to AWS inspector in the AWS web console then you'll see why they chose "some boxes" as the right answer.