You are creating a new security group to allow users responsible for security oversight to...

The correct answer is D – User-based.

User-based security groups are manually assigned to specific users and are typically used for administrative or audit-level access . They can be configured as unconstrained , granting full visibility across all organizations and data in the tenant.

For users responsible for security oversight or auditing , a user-based group (such as Security Administrator or Security Auditor ) is appropriate. This group can be assigned to the necessary domain and business process security policies that control access to security reports and configuration data.

Other group types (e.g., role-based or segment-based) depend on organizational context and cannot provide unrestricted system-wide visibility, making a user-based group the correct option for full security monitoring.