Which technology can best protect data at rest on a user system?

Which technology can best protect data at rest on a user system?
A. network IPS
B. router ACL
C. IPsec tunnel
D. full-disk encryption