Your company has an existing RDS Instance-MySQL with data already in place. The IT Security department is now mandating that all data be encrypted at rest. Which of the following are options you can take to comply with this requirement? Choose 2 answers from the options given below.

Answer options:

A.Enable encryption for the existing database.
B.Recreate a new DB with the encryption enabled. Copy the existing data to the new DB.C.Create a snapshot of the existing DB. Create an encrypted copy of that snapshot and use it to recreate the existing database.
D.Create a snapshot of the existing EBS Volumes. Create an encrypted copy of that snapshot.

Correct Answers: B and C
The AWS Documentation mentions the following.
You can only enable encryption for an Amazon RDS DB instance when you create it, not after the DB instance is created.
However, because you can encrypt a copy of an unencrypted DB snapshot, you can effectively add encryption to an unencrypted DB instance. You can create a snapshot of your DB instance and then create an encrypted copy of that snapshot. You can then restore a DB instance from the encrypted snapshot, and thus you have an encrypted copy of your original DB instance. 
Since this is clearly mentioned in the AWS documentation, all other options are incorrect.
For more information on metrics for RDS, please visit the below URL-
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html