How can a Salesforce architect provide an optimal solution for this scenario?

Universal Containers (UC) has a private Organization-Wide Defaults (OWD) model for the Account object and needs to control the access of records and fields according to these requirements:

• Sales reps can view/edit only their own records and cannot access the field "segment" in account page.

• Service reps need to view all accounts but cannot edit any information.

• Sales managers can modify any account of reps reporting to them.

• Service managers can modify any account.

How can a Salesforce architect provide an optimal solution for this scenario?
A . Use profiles, sharing rules, and change OWD to public read-only.
B. Use profiles, manual sharing, and field-level security.
C. Use profiles, permission sets, and field-level security.
D. Use profiles, permission sets, role hierarchy, and field-level security.

Answer: D