A company is implementing app protection policies to secure sensitive data on employee devices. They want to ensure that only approved applications can access corporate data, while also allowing employees to use personal applications without compromising security. The IT department is considering the following configurations: restricting data sharing between corporate and personal apps, requiring a PIN for accessing corporate applications, and enabling encryption for data at rest. Which combination of these configurations would best achieve the goal of protecting corporate data while allowing personal app usage?