Which of the following is a way to implement a technical control to mitigate data loss in case of a mobile device theft?

Full-disk encryption (such as BitLocker or FileVault) encrypts all data stored on the device so that even if the drive is removed and read directly or the device is booted from external media, the data remains ciphertext without the decryption key. This is a technical control because it is enforced by the system itself rather than relying on user behavior.

An encryption policy is an administrative control - a written directive - and does not by itself encrypt any data on a device.

A solid-state drive is a storage hardware type that may offer some data recovery resistance due to wear-leveling, but it does not inherently encrypt data or prevent unauthorized access to stored files.

A mobile device policy is an administrative control defining rules and requirements; it does not technically enforce data protection without accompanying technical implementations.