Contract defines defines the roles and responsibilities for risk management between a cloud provider and a cloud customer

Multifactor Authentication and Encryption are most effective protect mechanisms against data breaches in cloud environment. Other options do form part of overall security strategy in cloud but Option D is the strongest contender for the answer.

Programming as a Service is not a common offering; the others are ubiquitous through out the industry.

like this, which has similar-looking answers should be carefully answered Risk Management is overall process which covers from identifying threats to ultimately review the effectiveness of the controls.