A security administrator is working to secure company data on corporate laptops in case the laptops are stolen. Which of the following solutions should the administrator consider?

Disk encryption is the most effective solution for protecting data on stolen laptops. If a laptop is stolen, the data on its hard drive will be unreadable without the correct decryption key, making it inaccessible to unauthorized individuals. Data loss prevention (DLP) focuses on preventing data from leaving the organization's control, which is useful for preventing accidental or malicious data exfiltration but doesn't protect data already on a stolen device. Operating system hardening involves configuring the OS to reduce its attack surface, enhancing general security but not directly protecting data if the physical device is compromised. Boot security, such as secure boot or BIOS/UEFI passwords, protects the boot process but doesn't encrypt the data on the drive itself once the system is bypassed or the drive is removed.