Actually I'd tend to A, because the question is about a "Horizon Administrator", not an Active Directory Administrator. While an AD security group would obviously the best thing to modify in a decent environment, a Horizon Administrator would not be able to modify that group, but forward that requirement to an AD Admin. Still, the Horizon Administrator can add the Junior Admins AD Account to an entitlement.

Access Groups are used to manage user access to desktops, applications, and RDS farms in Horizon. Access Groups are created and managed by high-level administrators and allow for fine-grained control over user access to resources. By adding the appropriate users or groups to the Access Groups, the high-level administrator can grant the necessary permissions to view and manage the RDS farms. Therefore, the correct answer is D. Access Groups.

Access Group provided delegate user permissions to manage the Horizon

Access Groups D is the correct answer

D is correct.

The answer is D. "...You configure administrator access to the resources in an access group by assigning a role to an administrator on that access group. Administrators can access the resources that reside only in access groups for which they have assigned roles..." "...You can use Horizon Administrator to create access groups and to move existing desktop pools to access groups. When you create an automated desktop pool, a manual pool, or a farm, you can accept the default root access group or select a different access group..." https://docs.vmware.com/en/VMware-Horizon-7/7.13/horizon-administration/GUID-E89B0429-2DE4-4CF8-845B-F046307216AE.html

Access Groups let you designate permissions to specific pools instead of to all pools.

I believe it is Settings>>>Administrators>>>Access Groups an add the required read permissions for the inventory objects

Answer is D. See this link for an explanation on Access Groups and using them to limit administrative access: https://docs.vmware.com/en/VMware-Horizon-7/7.13/horizon-administration/GUID-E89B0429-2DE4-4CF8-845B-F046307216AE.html

A is correct tricky question

The answer is D, Access Groups. They are similar to a form of tagging and can be used to limit Administrative access to specific pool(s). Global Entitlements provide end user access.

Global Entitlements is the correct answer. Global policies are used fo controling the behavior of all client sessions users.