Correct Answers:
A. Event Monitoring to monitor all user activities
Yes. Event Monitoring (part of Salesforce Shield) enables detailed logging of user activity, including:

Login history

Report exports

API calls

Page views

Session hijacking attempts

This is critical for audit trails, security reviews, and compliance.

D. Transaction Security Policies to prevent export of Salesforce Data
Yes. Transaction Security in Shield lets you:

Detect and block/report real-time actions, like data exports or logins from risky contexts

Enforce policies, e.g., prevent users from exporting data via reports or APIs

Critical for protecting sensitive customer and financial data.

E. Encrypt Sensitive Customer Information maintained in SF
Yes. Platform Encryption (also part of Salesforce Shield) allows you to:

Encrypt PII (e.g., name, SSN, email) and financial info

Retain search, validation, and workflow functionality

Meet compliance standards like GDPR, HIPAA, etc.

❌ Why the other options are incorrect:
B. Restrict access to SF from users outside specific geography
This is a valid security requirement, but it’s not directly fulfilled by Shield.

You’d need to implement network restrictions like:

Login IP ranges

VPN/Identity Provider policies

Geolocation-based access control via SSO or external IdP

Shield does not natively block logins by geography — that’s done outside Shield.

C. Prevent Sales users access to customer PII information
Again, this is a valid functional requirement, but it’s achieved through:

Field-level security

Permission sets

Sharing rules

Shield doesn't control who sees what — it monitors, encrypts, or blocks behavior.

You use core platform security, not Shield, for access restriction.

✅ Final Answer:
A. Event Monitoring
D. Transaction Security Policies
E. Encrypt Sensitive Customer Information

These are all part of Salesforce Shield and directly address:

Monitoring

Export control

Data encryption and compliance...

Answer: ADE

ADE reference: https://www.salesforce.com/ap/platform/shield/