A cloud provider is evaluating an insider threat. A resource from the company operations team has access to the servers' virtual disks. This poses a risk that someone could copy and move the virtual s

Tokenization replaces sensitive data with non-sensitive unique identification symbols (tokens). If the virtual disk contains tokenized data, even if an insider copies the disk, the actual sensitive information is not exposed or compromised, thus mitigating the risk of data access.

Encryption protects data at rest, but if an insider copies the encrypted virtual disk, they still possess the encrypted data, which could potentially be decrypted later if the key is compromised or a weakness is found.

A virtual firewall controls network traffic and would not prevent an operations team member with direct virtual disk access from copying the disk.

Hashing creates a fixed-size string from data, primarily used for data integrity verification or password storage, and does not protect the original data from being copied or accessed.