Of Ten Newly Deployed VMs from a Single Template, the Cloud

Of ten newly deployed VMs from a single template, the cloud administrator notices one VM has direct root access enabled and automatic configuration control disabled. These settings do not comply with the company's policies for production VMs. Which of the following is the MOST likely cause of this situation?

A) Another administrator intentionally changed the settings.
B) The template is misconfigured.
C) There is provisioning workflow breakdown.
D) There is a bug in the current hypervisor version.