Guy, a VMware Administrator, Has Removed an Administrator That Is

Multiple Choice

Guy, a VMware administrator, has removed an administrator that is suspected of malpractice from a group that controls the ability to remove hosts from vCenter. Several days after Guy has completed this task, he receives a call from his manager stating that the administrator Guy removed from the group has been removing hosts from vCenter. Which of the following is the most likely reason for the administrator's continued ability to remove hosts?

A) Guy is incompetent and did not remove the permissions correctly.
B) Permission changes take effect up to 10 days after being made.
C) The rogue administrator was specifically granted permissions through his user account.
D) The "no VMware remove" option was ticked in the rogue administrator's AD account.