An administrator configured security features on company-owned mobile devices to help protect against data loss. Which of the following is the best way to protect data on a misplaced device?

Remote wipe is a critical feature to destroy data on a misplaced device, but it's a reactive measure. Encryption provides proactive protection of the data itself from unauthorized access before a wipe can occur.

Device encryption renders all data on the device unreadable without the correct decryption key, protecting it even if the device falls into unauthorized hands and before a remote wipe can be initiated. It protects data at rest, making it the best way to protect the data itself from being accessed on a misplaced device.

PIN codes protect access to the device but do not directly protect the data on the device if the device's storage is physically accessed or if the PIN is compromised.

Locator applications help find a misplaced device but do not protect the data stored on it from unauthorized access if the device is found by someone else.