A cloud-based CRM software used by your company allows users to export sensitive customer data. To align with the company's data handling policy, which software feature policy should be enforced?
Encrypt data at rest
Enforce password complexity requirements
Provide read-only access to all users
Restrict the export feature based on user roles