An eligible Workspace edition should detect sensitive identifiers in Drive content and block unauthorized sharing. Which approach best fits?

1. Configure and apply appropriate classification labels.
2. Review and configure Google Takeout and supported export controls.
3. Create appropriate Drive DLP rules and validate detectors and actions.
4. Use supported Drive trust rules and sharing controls scoped to the approved parties.