Bohabaven wants to implement the Grants Management module of Public Sector Solutions.

The Bottom Line (Direct Answer): Answer: D, E — D (Implement spam checking for Bohabaven's Experience..); E (Set the external organization-wide default sharing..). This is the lowest-customization answer that still satisfies the business, security, and lifecycle requirements.

The Core Concept Explained: OmniStudio separates guided interaction, data mapping, orchestration, and UI presentation. That separation is critical for high-volume public-sector intake because each asset can be tested and reused independently.

Step-by-Step Technical Analysis: Design the user journey first, then decide which OmniStudio asset owns each responsibility. OmniScript captures guided input, DataRaptors map Salesforce data, Integration Procedures orchestrate server-side work, and FlexCards expose summarized context. After assembly, validate data payloads, error handling, security, and performance with realistic application records. Implement CAPTCHA on the Experience Site forms and set external organization-wide defaults for grant application objects to Private.

Why the Incorrect Options Are Wrong: A does not meet the implementation-quality bar for security, scale, auditability, or maintainability in this scenario. B does not meet the implementation-quality bar for security, scale, auditability, or maintainability in this scenario. C does not meet the implementation-quality bar for security, scale, auditability, or maintainability in this scenario.