Universal Container wants to prevent its service team from accessing deal records. While service users are unable to access deal list views, they are able to find the deal records via a search. What options should the administrator adjust to fully restrict access?

A. Record setting and search index

B. Permissions and tab visibility

C. App permissions and search terms

D. Page layouts and field- level security