How can the administrator exclude the contractor group …

A vSphere administrator manages a cluster which includes critical and non-critical virtual machines. The cluster
requires different permissions for contractors and non-contractors.
How can the administrator exclude the contractor group from some of the critical VMs?

A.
Apply permission for both contractors and non-contractors on the cluster level.

B.
Apply permission for both contractors and non-contractors on the cluster level. Remove permission on the
critical VMs for contractors.

C.
Remove permission for contractors on the cluster level. Apply permission on the critical VMs for noncontractors.

D.
Apply permission for both contractors and non-contractors on the VMs. Remove permission on the critical
VMs for contractors.

Explanation:
To exclude the contractor group simple apply permission for both contractors and non-contrators on the cluster
level. After that, remove premission on the critical VMs for contractors.