What metadata can be made manually in production without deployment? (Choose 2)

Ideally, who should be in charge of logging all changes in production?

Universal Containers has created two custom objects called Seminars and Attendees. Organization-wide defaults for these objects have been set to Private. Universal Containers wants to set up a new junction object between these custom objects. A select group of users should be able to edit records in the junction object.
Which two steps should an app builder take to configure the proper security? (Choose two.)

Universal containers would like to use a chatter group for their mergers and acquisition team to collaborate on potential new projects. This group should not be visible for non-members to see or join, and can be accessed by invite only.
Which chatter Group type should the app builder recommend?

Universal Containers uses a private sharing model on Accounts. User A and User B both own Accounts of their own and have both been sent a new Account record in an email owned by User C to take a look at. User A is able to open and view the record but User B receives an insufficient privileges error. User A and User B have the same role in the Role Hierarchy as User C.
What are the three reasons User A has access but User 8 is unable to access the record?
Choose 3 answers