In Workday, field-level visibility during business processes-especially for self-service events-is controlled through Optional Fields configuration, not security domains. The Request One-Time Payment for Self process has its own optional field settings that allow administrators to show or hide specific fields for employees.
To prevent employees from modifying sensitive options such as Gross Up and Send to Payroll, administrators must configure Optional Fields specifically for the Request One-Time Payment for Self process and hide those checkboxes. This preserves the self-service capability while enforcing governance and preventing unintended financial impact.
Removing security domain access would block employees from initiating the process entirely, which does not meet the requirement. Configuring optional fields on the administrator-driven Request One-Time Payment process would not affect self-service behavior.
Therefore, the correct and precise solution is to configure Optional Fields for Request One-Time Payment for Self and hide the fields, making option D correct.