What is the purpose of reviewing the data classification of the environment during an audit?

To ensure that data is protected based on its sensitivity$.$

To determine the appropriate password controls for the application

To verify the existence and use of role$-$based access controls

To review the processes for granting and removing user access