How should the Salesforce Administrator fulfill this requirement?

Universal Containers (UC) builds a Community to support customers who purchased its products.

UC has the following security requirements:

– Support encryption at rest.

– Show decrypted data in the UX (user experience) to users with permissions.

– Encrypt all Community data.

How should the Salesforce Administrator fulfill this requirement?
A . Install a third-party app from AppExchange to encrypt the data at rest.
B . Encrypt data in portals without updating Community configuration.
C . Create encrypted fields for Community data.
D . Leverage Salesforce Shield to encrypt and decrypt all data at rest.