The correct answer is C - Implementation of role-based access controls and encryption of all sensitive data.
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), the combination of role- based access control (RBAC) and encryption protects sensitive health data by ensuring only authorized users can access necessary information, while encryption ensures the data remains secure both at rest and in transit.
Disabling USB ports (A) prevents data exfiltration but does not fulfill broad privacy requirements. Encrypting network traffic (B) protects in-transit data only. Firewalls (D) protect against unauthorized access but do not manage user roles or internal data privacy.
Reference Extract from Study Guide:
"Protecting sensitive health data requires a combination of access control models such as RBAC and encryption, ensuring both authorization and confidentiality."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Privacy and Data Protection Strategies