How should an app builder configure Account sharing so that community users only see their own Account?

Universal Containers has Public Read/Write as the Account organization-wide default (OWD) setting. Visitors to the customer community site report that they can see all of the company’s account records.

How should an app builder configure Account sharing so that community users only see their own Account?
A . Create an account record type for external accounts.
B. Define an owner-based sharing rule for external accounts.
C. Define a permission set for external accounts.
D. Set the account external OWD to private.

Answer: D