Full-disk. Unless you have a specific reason for encrypting individual files--such a financial statements or legal documentation that may get moved around.