Answer – B,C and D
Amazon EBS encryption offers you a simple encryption solution for your EBS volumes without the need for you to build, maintain, and secure your own key management infrastructure. When you create an encrypted EBS volume and attach it to a supported instance type, the following types of data are encrypted:
Data at rest inside the volume
All data moving between the volume and the instance
All snapshots created from the volume
For more information on EBS Encryption, please refer to the below link:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html
Data protection refers to protecting data while in-transit (as it travels to and from Amazon S3) and at rest (while it is stored on disks in Amazon S3 data centers). You can protect data in transit by using SSL or by using client-side encryption.
For more information on S3 Encryption, please refer to the below link:
http://docs.aws.amazon.com/AmazonS3/latest/dev/UsingEncryption.html