A system administrator has been instructed by the head of security to protect their data at-rest.
Which of the following would provide the strongest protection?

A.
Prohibiting removable media

B.
Incorporating a full-disk encryption system

C.
Biometric controls on data center entry points

D.
A host-based intrusion detection system