A database contains public product descriptions and restricted medical records. What should determine the stronger protection requirements for the medical records?

1. The number of characters in each record
2. The alphabetical order of database tables
3. Data classification and applicable requirements
4. The vendor's default sample configuration