As part of a new BYOD rollout, a security analyst has been asked to find a way to securely store company data on personal devices. Which of the following would BEST help to accomplish this?

Requiring an eight-character PIN primarily secures device access but does not specifically isolate or protect company data from personal data on a BYOD device.

Containerization creates a secure, encrypted sandbox for company applications and data on a personal device, isolating it from the user's personal data. This isolation allows for specific security policies, such as data encryption, access controls, and remote wipe capabilities, to be applied only to the corporate container without affecting the user's personal files.

Requiring annual AUP sign-off is a policy or legal control, not a technical solution for securely storing data on a device.

Using geofencing to unlock devices controls access based on location, but it does not secure the storage of company data or isolate it from personal data on the device.