Full-disk encryption is the correct choice because it encrypts the entire hard drive, including the operating system, applications, and all files. This ensures that if the laptop is lost or stolen, the data on it remains protected and inaccessible without the proper credentials or decryption key. Partition encryption would only protect specific partitions, which might leave other sensitive data exposed. File encryption is more granular and would not provide the broad protection needed for this scenario. Database encryption is intended for protecting data within databases and does not address the potential risk of entire drives being accessed through theft or loss.