Hash totals are a control technique used to ensure data integrity during batch processing. A hash total is a calculated value based on the data in a batch. This value is compared to a pre-calculated hash total to confirm that all data has been processed correctly and without alteration.
References
ISACA CISA Review Manual (27th Edition): Hash totals are discussed within the context of batch processing controls.
Other Auditing Resources: Hash totals are a fundamental control technique discussed in various audit and information security publications.

Configuring rule sets is the first activity that should be completed during the implementation of a DLP solution, because rule sets define the criteria and actions for identifying, monitoring, and preventingdata loss incidents12. Rule sets are based on the organization's data classification, policies, and requirements, and they help to ensure that the DLP solution is aligned with the business objectives and risk appetite34. Configuring rule sets before enabling detection points, establishing exceptions workflow, or configuring reports helps to avoid false positives, false negatives, or unnecessary alerts5.
References
1: 3.13: Deploy a Data Loss Prevention Solution - Read the Docs
2: Plan and implement data loss prevention (DLP) [Guided] - NICCS
3: CONTINUOUS DIAGNOSTICS AND MITIGATION PROGRAM DATA PROTECTION ... - CISA
4: Continuous Diagnostics and Mitigation Program Technical ... - CISA
5: Data Loss Prevention Best Practices - ISACA Journal

Periodic recertification of users ensures that only authorized individuals retain access to cloud services and helps identify and revoke access for users who no longer require it. This is a critical control for maintaining security and compliance in a cloud environment.
Classifying Cloud Services (Option A):This is foundational but does not verify ongoing user access.
Centrally Managing Users (Option B):While useful for consistency, it does not assess whether access rights are still valid.
Ensuring Cloud Process Resilience (Option C):This focuses on operational continuity rather than access control.
Periodic recertification aligns with governance practices to ensure access rights remain appropriate over time.
Reference:ISACA CISA Review Manual, Job Practice Area 4: Protection of Information Assets.