Which option, when applied to a rule, allows all encrypted and non-VPN traffic that matches the rule?

All Site-to-Site VPN Communities restricts the rule to only site-to-site VPN traffic, excluding clear non-VPN connections.

When 'Accept all encrypted traffic' is set in a rule's VPN column, the Security Gateway applies that rule's action to all incoming encrypted traffic from any VPN community without restriction. This differs from community-specific options because it does not limit matching to a predefined set of communities, and clear traffic can also match the rule through normal rule base processing - covering both encrypted and non-VPN traffic as the question describes.

All Connections (Clear or Encrypted) is not a distinct named VPN column option in the Check Point rule base in the way the question describes it.

Specific VPN Communities limits the rule to traffic matching only the explicitly chosen communities, excluding all other encrypted and non-VPN traffic.