Which configuration should you implement?

You recently started an engagement with an organization that is also using Google Workspace. The engagement will involve highly sensitive data, and the data needs to be protected from being shared with unauthorized parties both internally and externally. You need to ensure that this data is properly secured.

Which configuration should you implement?
A . Turn on external sharing with whitelisted domains, and add the external organization to the whitelist.
B . Provision accounts within your domain for the external users, and turn off external sharing for that Org.
C . Configure the Drive DLP rules to prevent the sharing of PII and PHI outside of your domain.
D . Create a Team Drive for this engagement, and limit the memberships and sharing
settings.

Answer: D

Explanation:

https://support.google.com/a/users/answer/9310352#1.1