A new company policy requires all data stored in a private cloud to be encrypted at rest. Which of the following is the MOST efficient way to achieve this requirement with the least performance impact

Encrypting file systems in VM templates would require each VM to perform its own encryption/decryption, consuming CPU cycles and potentially impacting VM performance.

Enabling encryption on the hypervisor side would centralize encryption but would consume hypervisor CPU resources, potentially impacting the performance of all VMs running on that hypervisor.

Enabling encryption on storage arrays leverages dedicated hardware and firmware on the storage system itself to perform encryption and decryption. This method centralizes the encryption management and offloads the computational burden from individual VMs or the hypervisor, thus minimizing performance impact on compute resources.

Enabling encryption using the host's TPM primarily secures encryption keys and boot integrity, but the actual data encryption/decryption process would still be handled by the host CPU, affecting performance.