How should the Salesforce Administrator fulfil this requirement?

Universal Containers (UC) builds a Community to support customers who purchased its products.

UC has the following security requirements:

– Support encryption at rest

– Show decrypted data in the UX (user experience) to users with permissions

– Encrypt all Community data

How should the Salesforce Administrator fulfil this requirement? Select one or more of the following:
A . Install a third-party app from AppExchange to encrypt the data at rest
B . Leverage Salesforce Shield to encrypt and decrypt all data at rest
C . Encrypt data in portals, but not in Communities
D . Create encrypted fields for Community data