A. Block volume can be moved from a security zone to a standard compartment

B. Bucket can't be moved from a security zone to a standard compartment

C. Resources in a security zone must be accessible from internet

D. Resources in a security zone must be encrypted using customer-managed keys