A company laptop is lost. Which preventive control most directly protects data on its internal drive from offline access?

1. A short browser history retention period
2. A login wallpaper showing the owner's name
3. Disabling Bluetooth discovery only
4. Full-disk encryption with protected keys