The correct option is To align protection measures with the asset value and risk profile of the data.

Labeling and assigning sensitivity tiers allows organizations to determine which protections are appropriate for each category of data. By understanding asset value and the risk profile organizations can prioritize controls such as access restrictions encryption monitoring and retention rules for the most sensitive information while avoiding unnecessary costs for low risk data.

This approach supports consistent handling practices incident response and regulatory compliance because controls are applied based on impact and likelihood rather than ad hoc decisions. Classification also enables clearer policies and automated enforcement through data loss prevention tools and identity and access management.

To impose restrictions on how data may be used is not the best answer because imposing restrictions is one possible control choice rather than the primary purpose. The point of classification is to align protections to value and risk so any restrictions are proportional and justified.

To mark datasets with confidentiality integrity and availability requirements is incomplete because while classification may capture CIA considerations the core goal is to map those requirements into appropriate controls based on asset value and risk. Simply marking datasets does not explain how protections are chosen.

To tag records with sensitivity labels to guide handling and sharing describes a mechanism rather than an objective. Tagging and labeling are implementation steps used to achieve the real goal which is aligning protection measures to the data s value and risk profile.

Full AWS Practitioner Certification Question