The answer here D as stated is not correct in my opinion, because read only access to an object means the user can only view or search records.
Further explanation from Trailhead to support my stance - When a user has read-only access to a Salesforce object, they can view, search, and report on records, but cannot edit, create, or delete them. Their record visibility is restricted by Organization-Wide Defaults (OWD) (e.g., they only see records owned by them or shared via rules) unless "View All" is enabled. As such, the correct answer should be B and not D, in my opinion.
@Admin, Kindly check.