Enabling SSL/TLS for encryption over the wire and using encrypted extracts for at-rest data This configuration secures sensitive patient data by encrypting it during transmission (SSL/TLS) and when stored (using encrypted extracts), aligning with healthcare data security standards. Option A is incorrect because disabling encryption compromises the security of sensitive patient data. Option B is incorrect as it neglects the need for encrypting data in transit, which is critical for data security. Option D is incorrect because partial at-rest encryption may not fully comply with data security standards for handling patient data.