A company allows collaboration with selected partner domains but wants other external sharing blocked. Which approach best fits?

1. Create appropriate Drive DLP rules and validate detectors and actions.
2. Use supported Drive trust rules and sharing controls scoped to the approved parties.
3. Configure and apply appropriate classification labels.
4. Review and configure Google Takeout and supported export controls.