The correct option is To meet the highest regulatory standards and eliminate redundant controls.

Harmonizing controls around the highest applicable standards creates a single, consistent baseline that addresses the strictest regulatory requirements. This reduces duplicated effort by allowing the company to implement one set of policies and controls that satisfy multiple jurisdictions while still mapping to local differences where needed.

A unified framework also simplifies audits and evidence collection because processes and controls are consistent across regions. That consistency improves risk management and lowers operational cost while making it easier to demonstrate compliance to regulators and customers.

To adopt only the most permissive regional rules is incorrect because selecting permissive rules would leave the company exposed where stricter laws apply and would not achieve true cross-border compliance.

To focus exclusively on technical security measures is incorrect because effective control frameworks include governance, process, and physical controls in addition to technical measures and focusing only on technology misses those essential elements.

To try to avoid complying with local laws altogether is incorrect because harmonization does not remove legal obligations and attempting to avoid local compliance creates significant legal and business risk.

Full AWS Practitioner Certification Question