A company wants new files to default to an approved internal audience while still enforcing separate external-sharing restrictions. Which approach best fits?

1. Configure supported Gmail delegation.
2. Set appropriate Drive default sharing and audience controls.
3. Use an appropriately governed shared drive.
4. Configure the appropriate calendar external-sharing limits.