The correct option is Data movement and storage. A data flow diagram most clearly represents how data moves through a system and where it is stored.

Data flow diagrams model processes, data stores, data flows, and external entities. They show inputs and outputs and the paths that information takes, and this makes them a clear tool for mapping information flow and identifying where data is persisted.

Cloud IAM is focused on identity and access management for cloud resources. A DFD does not specify IAM policies or role bindings, and it is not the primary diagram for showing cloud access control.

Potential attack scenarios can be derived from a DFD during threat modeling, but a DFD itself is a structural representation of data movement and storage. It does not list likely attacks or exploit paths by itself.

User privilege assignments describe which users or roles have which permissions. Those assignments are part of access control documentation and IAM diagrams rather than the core purpose of a data flow diagram.

Full AWS Practitioner Certification Question