A Company Is Migrating Its Data Center to AWS

Multiple Choice

A company is migrating its data center to AWS. As part of this migration, there is a three-tier web application that has strict data-at-rest encryption requirements. The customer deploys this application on Amazon EC2 using Amazon EBS, and now must provide encryption at-rest. How can this requirement be met without changing the application?

A) Use AWS Key Management Service and move the encrypted data to Amazon S3.
B) Use an application-specific encryption API with AWS server-side encryption.
C) Use encrypted EBS storage volumes with AWS-managed keys.
D) Use third-party tools to encrypt the EBS data volumes with Key Management Service Bring Your Own Keys.