A Database Specialist migrated an existing production MySQL database from on-premises to an Amazon RDS for MySQL DB instance. However, after the migration, the ...

A Database Specialist migrated an existing production MySQL database from on-premises to an Amazon RDS for MySQL DB instance. However, after the migration, the database needed to be encrypted at rest using AWS KMS. Due to the size of the database, reloading, the data into an encrypted database would be too time-consuming, so it is not an option.
How should the Database Specialist satisfy this new requirement?

A. Create a snapshot of the unencrypted RDS DB instance. Create an encrypted copy of the unencrypted snapshot. Restore the encrypted snapshot copy. B. Modify the RDS DB instance. Enable the AWS KMS encryption option that leverages the AWS CLI. C. Restore an unencrypted snapshot into a MySQL RDS DB instance that is encrypted. D. Create an encrypted read replica of the RDS DB instance. Promote it the master.