The correct option is Provisioning the underlying infrastructure.

The cloud vendor provisions the physical servers storage networking and virtualization layer in an IaaS model. They operate data centers maintain the hardware and provide the hypervisor and base networking so tenants get compute and storage resources without owning the underlying infrastructure.

The tenant is responsible for the guest operating system middleware applications and data and for configuring and securing the virtual machines and networks that run on the provided infrastructure.

Applying corporate governance and security policies is incorrect because applying an organization specific governance framework and security policies is the tenant responsibility. The provider supplies the platform but does not enforce a customer's internal governance rules.

Installing and tuning virtual machines and networks is incorrect because installing the OS tuning the guest and configuring network settings for applications is performed by the tenant. The vendor supplies the virtual hardware and connectivity but not the guest level configuration work.

Controlling which applications and users have access is incorrect because controlling identities roles and application access belongs to the tenant. Providers may offer identity tools but the tenant configures who can access their workloads and data.

Full AWS Practitioner Certification Question