Which of the following would be MOST appropriate for storing sensitive data in a secure storage environment?

LUN masking controls which hosts can access a storage volume, but does not protect the data itself if an authorized host is compromised.

ACLs manage user and process access to files and folders within an operating system, but do not protect data if the underlying storage is accessed directly outside the OS.

Encryption directly protects data's confidentiality by converting it into a coded form, making it unreadable to unauthorized parties, which is crucial for sensitive data even if the storage device is accessed improperly.

Zoning segments a Storage Area Network (SAN) to control device communication, providing network-level isolation rather than direct data protection at rest.