A Big Data analytics company wants to ensure its data is protected at rest. Which of the following is the BEST hardware-based solution?

A self-encrypting disk (SED) contains a dedicated hardware encryption processor that encrypts and decrypts data transparently as it is written to or read from the drive. Because encryption is performed entirely in hardware, it introduces no software overhead and is ideal for protecting large volumes of Big Data at rest without impacting application performance.

Tokenization replaces sensitive data values with non-sensitive placeholders in software and is not a hardware-based encryption solution for protecting data stored on disk.

LUN masking is a storage access control technique that restricts which hosts can see a given logical unit and does not encrypt data stored on the disk.

Deduplication reduces storage consumption by eliminating duplicate data blocks and is a storage efficiency technique, not a security or encryption mechanism.