A Company Currently Operates a Web Application Backed by an Amazon

A company currently operates a web application backed by an Amazon RDS MySQL database. It has automated backups that are run daily and are not encrypted. A security audit requires future backups to be encrypted and the unencrypted backups to be destroyed. The company will make at least one encrypted backup before destroying the old backups. What should be done to enable encryption for future backups?

A) Enable default encryption for the Amazon S3 bucket where backups are stored.
B) Modify the backup section of the database configuration to toggle the Enable encryption check box.
C) Create a snapshot of the database. Copy it to an encrypted snapshot. Restore the database from the encrypted snapshot.
D) Enable an encrypted read replica on RDS for MySQL. Promote the encrypted read replica to primary. Remove the original database instance.