A server on the network stores sensitive data for a department in the company. Many users in that department access the data. A systems administrator has been instructed to ensure only this data is…

Disk-level encryption encrypts all data on the drive indiscriminately, including non-sensitive data, violating the requirement to encrypt only the specific sensitive data in the most efficient manner.

File-level encryption protects data at rest on the storage medium but does not address the network exposure risk when many users are actively transferring the sensitive data across the network.

Data transfer encryption secures only the sensitive data as it travels between the server and clients across the network, which is precisely where exposure occurs when many users are actively accessing it. This approach efficiently targets only the transmitted data without encrypting unrelated data stored on disk, and it can be implemented centrally without per-file key management overhead.

User-initiated encryption is inefficient and unreliable because it requires each individual user to manually trigger encryption, introducing inconsistency and human error into the protection of sensitive data.