The correct answer is Because system authorization is a shared obligation among application owners security teams and executives.

Because system authorization is a shared obligation among application owners security teams and executives is correct because authorization combines business decision making risk acceptance and technical enforcement. Application owners define who needs access to perform business functions and they approve access requests. Security teams design controls monitor compliance and implement enforcement mechanisms. Executives set policy accept residual risk and hold the organization accountable.

Cloud IAM is incorrect because it names a toolset rather than assigning responsibility. Cloud identity and access management features help enforce policies but they do not replace the need for owners and leadership to make authorization decisions.

Because auditors alone should be accountable is incorrect because auditors provide independent assessment and assurance. Auditors do not accept business risk nor do they own day to day authorization decisions.

Because authorization is purely a technical engineering task is incorrect because authorization also requires policy work business context and risk acceptance. Engineers implement controls but they are not the final authority on whether the business accepts residual risk.

Full AWS Practitioner Certification Question