For your new client, you are instructed by your manager to create a group of EC$2$ instances that are attached with optimized EBS. Your company requests that you encrypt the root volume which is needed to boot the instances, due to security compliance. How is this accomplished?

When launching the EC$2$ instance, select the Root EBS Volume Encryption option.

Root volume encryption is not possible. Add a second EBS volume that was launched with encryption enabled. Create an encrypted EBS volume as the root volume using the console once the EC$2$ instances have been launched.

Launch an EC$2$ instance that is not encrypted, then take a snapshot of the root volume. Create Image utilizing the encrypted snapshot after making a copy of the snapshot with the encryption option enabled. For instance launch, use this AMI.

After launching the EC$2$ instance, encrypt the root volume with the AWS KMS master key.