A system administrator has been instructed by the head of security to protect their data at-rest.
Which of the following would provide the strongest protection?

A.
Prohibiting removable media

B.
Incorporating a full-disk encryption system

C.
Biometric controls on data center entry points

D.
A host-based intrusion detection system

Explanation:
Full disk encryption can be used to encrypt an entire volume with 128-bit encryption. When the entire volume is
encrypted, the data is not accessible to someone who might boot another operating system in an attempt to
bypass the computer’s security. Full disk encryption is sometimes referred to as hard drive encryption. This
would be best to protect data that is at rest.