A technician is setting up a new internal hard drive on a Windows 11 workstation that will store sensitive company files. The security team requires that the drive support per-file permissions and file-level encryption for individual folders. Which file system should the technician use when formatting the drive?