The correct answer isD - User-based.
User-based security groupsare manually assigned to specific users and are typically used foradministrative or audit-level access. They can be configured asunconstrained, granting full visibility across all organizations and data in the tenant.
For users responsible forsecurity oversight or auditing, auser-based group(such asSecurity Administratoror Security Auditor) is appropriate. This group can be assigned to the necessarydomain and business process security policiesthat control access tosecurity reportsand configuration data.
Other group types (e.g., role-based or segment-based) depend on organizational context and cannot provide unrestricted system-wide visibility, making a user-based group the correct option for full security monitoring.
Reference:Workday Pro HCM -Security Administration and Oversight, "User-Based Security Groups for Security Auditors and Administrators" section.