An organization wants to limit potential impact to its log-in database in the event of a breach. Which of the following options is the security team most likely to recommend?

Hashing is the most effective method for protecting a login database because it transforms sensitive data (like passwords) into a fixed-size string of characters that is computationally infeasible to reverse. This means that even if an attacker gains access to the hashed passwords, they cannot easily retrieve the original passwords. Tokenization replaces sensitive data with a non-sensitive placeholder (token), but the original data still exists elsewhere, making it less suitable for passwords where the original value is not needed after initial verification. Obfuscation makes code or data harder to understand but doesn't provide the same level of cryptographic protection as hashing against direct retrieval. Segmentation isolates network segments or data, which is good for limiting breach scope but doesn't protect the data itself within the database from being read if accessed.