The BEST way to isolate corporate data stored on employee-owned mobile devices would be to implement:

A. a sandbox environment.
B. device encryption.
C. two-factor authentication.
D. a strong password policy.