A security manager is creating a standard configuration across all endpoints that handle sensitive data.

Step by Step Explanation:

Drive encryption protects sensitive data at rest by ensuring unauthorized access cannot expose the data if the physical endpoint is compromised.

Patch management is a necessary security control but does not specifically address endpoint hardening for sensitive data.

Event logging aids in monitoring and incident detection but does not directly harden endpoints.

Resource monitoring manages system performance and availability but is unrelated to data security.