A manufacturing company's current security policy mandates PII is not stored in the SaaS solution. Which of the following configuration controls should be used to block sensitive information from bein

File-level encryption protects data at rest but does not prevent PII from being transmitted to or stored in the SaaS solution.

A network ACL can restrict outbound traffic from internal hosts to the SaaS solution's endpoints, ensuring no data, including PII, can be transmitted to or stored in the SaaS environment. This is a network-layer control that enforces the data residency policy independently of user or application behavior. Blocking the network path provides a deterministic enforcement mechanism that does not rely on application-level controls.

An IPS is designed to detect and block malicious or anomalous traffic patterns, not to enforce data classification or residency policies like blocking PII.

Content filtering operates at the application layer and may not be directly integrated or configurable to block data storage within a specific SaaS solution's data flows.