Cloud Kicks conducts an evaluation of sales reps with a custom object that houses a scorecard. The company wants to ensure that only the sales reps, their managers, and their manager's executives can view the rep’s scorecard, but also prevent the reps from being able to view the executive comment fields on their review. How should these requirements be met?

A. Use a private sharing model granting record access using hierarchy; manage field access with record types and field-level security.
B. Use a private sharing model granting record access using custom settings; manage field access with page layouts and field-level security.
C. Use a private sharing model granting record access using hierarchy; manage field access with field-level security.
D. Use a private sharing model granting record access using custom settings; manage field access with record types and page layouts.

Suggest answer: C

Reference: