Which of the following practices would be MOST effective in protecting personality identifiable information (Ptl) from unauthorized access m a cloud environment?

Applying a data classification policy is an important foundational step for managing data but does not directly implement technical protection against unauthorized access.

Encryption protects PII by rendering it unreadable to unauthorized parties, even if the data is exfiltrated, while logical access controls ensure only authorized users can access the encrypted data. Combining both provides a robust defense-in-depth approach against unauthorized access, safeguarding PII both at rest and in transit.

Requiring logical separation of company data isolates different datasets but doesn't inherently protect PII within a segregated area from unauthorized access if other controls are weak.

Obtaining the right to audit provides oversight and accountability but is a contractual or governance control, not a direct technical measure to prevent unauthorized access.