Your company has a set of resources defined in AWS. These resources consist of applications hosted on EC2 Instances. Data is stored on EBS volumes and S3. The company mandates that all data should be encrypted at rest. How can you achieve this? Choose 2 answers from the options below.

Answer options:

A.Enable SSL with the underlying EBS volumes.
B.Enable EBS Encryption.
C.Make sure that data is transmitted from S3 via HTTPS.
D.Enable S3 server-side Encryption.

Answer - B and D
The AWS Documentation mentions the following.
Amazon EBS encryption offers a simple encryption solution for your EBS volumes without the need to build, maintain, and secure your own key management infrastructure.
Server-side encryption protects data at rest. Server-side encryption with Amazon S3-managed encryption key (SSE-S3) uses strong multi-factor encryption.
Options A and C are incorrect since they have to do with encryption of data in transit, but not at rest.
For more information on EBS Encryption, please refer to the below link-
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html
For more information on S3 server-side encryption, please refer to the below link-
https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html