Which 3 Salesforce shield capabilities should a data architect recommend?

A customer is operating in a highly reputated industry and is planning to implement SF.

The customer information maintained in SF, includes the following:

✑ Personally, identifiable information (PII)

✑ IP restrictions on profiles organized by Geographic location

✑ Financial records that need to be private and accessible only by the assigned Sales associate.

✑ User should not be allowed to export information from Salesforce.

Enterprise security has mandate access to be restricted to users within a specific geography and detail monitoring of user activity.

Which 3 Salesforce shield capabilities should a data architect recommend? Choose 3 answers:
A . Event monitoring to monitor all user activities
B . Restrict access to SF from users outside specific geography
C . Prevent Sales users access to customer PII information
D . Transaction security policies to prevent export of SF Data.
E . Encrypt Sensitive Customer information maintained in S