Scenario: Migrating a stand-alone application storing PII to the cloud.
Data to Encrypt: Data at rest (Option B) should be encrypted:
Data in transit (Option A) and backups (Option C) are also important but not the primary concern here.
Data archives (Option D) may or may not contain sensitive data.