Which of the following best protects sensitive data in transit across a geographically dispersed infrastructure?

Encryption is the best method for protecting sensitive data in transit across a geographically dispersed infrastructure because it transforms the data into an unreadable format, making it unintelligible to unauthorized parties even if intercepted. This ensures confidentiality during transmission over untrusted networks. Masking, tokenization, and obfuscation are primarily techniques for protecting data at rest or during processing by altering its appearance or replacing it with non-sensitive substitutes. While these methods enhance data privacy and security in specific contexts, they do not provide the same level of confidentiality for data actively moving across a network as encryption does.