Which approach should an architect recommend to fix this problem?

Universal Containers (UC) has recently changed its internal policy to follow market regulations and create an internal team to manage the collection process. Only this team should have access to Invoke records. currently, invoke is a child in a Master-Detail relationship to Account. Although related lists have been removed from the page layouts, some profiles stills have access to the invoice object.

Which approach should an architect recommend to fix this problem?
A . Create a new Profile with no access to the Invoice object and assign it to all unauthorized users.
B. Create a Permission Set with No Access to the Invoice object and assign it to unauthorized users.
C. Replace Account and Invoke Master Detail Relationship by a Lookup and remove Invoice Access from the unauthorized profiles,
D. Change the Invoke organization-wide default from Controlled by Parent to Private and remove invoke access from the unauthorized

View Answer

Answer: C