A Big Data analytics company wants to ensure its data is protected at rest. Which of the following is the BEST hardware-based solution?

Self-encrypting disks (SEDs) are a hardware-based solution that encrypts all data written to the disk using an on-board crypto chip, protecting data at rest directly at the storage device level. This offers a robust security layer as the encryption and decryption processes are managed by the disk's hardware, independent of the operating system.

Tokenization is a software-based data protection method that replaces sensitive data with non-sensitive substitutes (tokens) and is not a hardware-based encryption solution for data at rest.

LUN masking is a storage management technique that controls which servers can access specific LUNs, providing access control, not encryption for data at rest.

Deduplication is a data optimization technique that eliminates redundant copies of data to save storage space and does not provide encryption for data at rest.