The best combination is Row Access Policies and Secure Views with Caller's Rights. Row Access Policies: Allow you to filter data based on the user accessing it, ensuring they only see data relevant to their department. Policies are applied to tables. Secure Views with Caller's Rights: Allow you to encapsulate the data access logic, ensuring that the row access policies are always enforced, and that consumers cannot bypass them. Caller's rights are essential here, as the access control decisions need to be made based on who is using the view. The other options are less suitable: A: Views and Stored Procedures can enforce access, but without Row Access Policies, they're less secure. B: UDFs can manipulate data but don't inherently enforce row-level security like Row Access Policies. C: External Tables are for data outside Snowflake; Owner's Rights are less secure than Caller's Rights in this scenario. E: Dynamic Data Masking hides data, it doesn't filter it, so it won't restrict access to specific rows.