Choose 1 option.

The AgentForce Security and Access Control Best Practices Guide emphasizes the principle of least privilege, which means granting each agent only the permissions strictly necessary to perform its defined tasks.

To prevent unauthorized access to sensitive data such as medical research, administrators should exclude permissions for the Medical Product object and related records from the AgentForce Service Agent’s permission set group. This approach ensures that even if the reasoning engine processes a related query, it cannot retrieve or expose data it lacks access to.

Option A is partially effective but not sufficient since Salesforce role hierarchy does not fully restrict record access. Option B is over-restrictive and would prevent legitimate operations involving other custom objects.

Thus, the correct answer is Option C – Follow the principle of least privilege and avoid granting permission to view the Medical Product object or related records.