A security professional needs to find a secure and efficient method of encrypting data on an endpoint. Which solution includes a root key?

BitLocker employs a key hierarchy that includes a Volume Master Key (VMK) protected by a root key, which can be stored in a TPM or as a recovery key. This root key structure ensures that the encryption keys are securely wrapped and only accessible under authorized conditions, providing both security and efficiency for endpoint disk encryption.

The Trusted Platform Module (TPM) is a hardware chip that stores cryptographic keys and can assist BitLocker, but it is a secure storage component rather than an encryption solution that itself includes a root key hierarchy for data encryption.

A Virtual Storage Area Network (VSAN) is a virtualized storage networking technology used for pooling storage resources across a network and is not an endpoint encryption solution nor does it inherently include a root key.

A Hardware Security Module (HSM) is a physical device used to manage and safeguard cryptographic keys for servers and applications, but it is not an endpoint data encryption solution and does not itself define a root key structure for encrypting endpoint data.