Which 3 Salesforce shield capabilities should a data architect recommend?

A customer is operating in a highly reputated industry and is planning to implement SF.

The customer information maintained in SF, includes the following:

✑ Personally, identifiable information (PII)

✑ IP restrictions on profiles organized by Geographic location

✑ Financial records that need to be private and accessible only by the assigned Sales associate.

✑ User should not be allowed to export information from Salesforce.

Enterprise security has mandate access to be restricted to users within a specific geography and detail monitoring of user activity.

Which 3 Salesforce shield capabilities should a data architect recommend? Choose 3 answers:
A . Event monitoring to monitor all user activities
B. Restrict access to SF from users outside specific geography
C. Prevent Sales users access to customer PII information
D. Transaction security policies to prevent export of SF Data.
E. Encrypt Sensitive Customer information maintained in SF.