The correct options are Create an organization API key and Remove an organization API key.

Organization level API keys affect the entire account and shared resources so only account administrators are permitted to manage them. That is why Create an organization API key is limited to the account administrator and Remove an organization API key is also limited to the account administrator.

Use an API key inside a script is incorrect because using an API key is an action any user or service with a valid key can perform and it does not require account administrator privileges.

Revoke a user API token from a personal account is incorrect because personal tokens are typically managed by the individual user and do not require the account administrator to revoke them.

Generate a personal user API token is incorrect because creating a personal token is a user level operation and does not need administrator rights.

Full AWS Practitioner Certification Question