Universal Container’s Salesforce Admin created a custom profile where support profile has only create read permission for the account object but the organization wide default for the account object is public read and write. Which of the following statements is correct?

Answer options:

A.Support profile users cannot edit any record on the account since they don’t have the edit permission on their profile
B.Support profile users can edit any record on the account since the organization wide default for the account is public read & write
C.Support profile users cannot read or edit any record on the account object
D.Support profile users can delete any record on the account

Correct Answer: A 
The profile permission for support is - create and read; the organization wide default is public read and write so the users cannot edit any records on the account since the profile is the starting point and the edit permission is not given through the profile. Profile permission is the maximum permission you can have. Organization wide default doesn’t have the ability to provide more permission than the profile permission. 
Option B is incorrect. Users cannot edit since the profile doesn’t provide the edit permission 
Option C is incorrect because users can read the records on the account object, but they can’t edit them. 
Option D is incorrect because users cannot delete any record since the delete permission is not given through the support profile. 
References: 

https://help.salesforce.com/articleView?id=admin_userprofiles.htm&type=5

Correct Answer: A 
The profile permission for support is - create and read; the organization wide default is public read and write so the users cannot edit any records on the account since the profile is the starting point and the edit permission is not given through the profile. Profile permission is the maximum permission you can have. Organization wide default doesn’t have the ability to provide more permission than the profile permission. 
Option B is incorrect. Users cannot edit since the profile doesn’t provide the edit permission 
Option C is incorrect because users can read the records on the account object, but they can’t edit them. 
Option D is incorrect because users cannot delete any record since the delete permission is not given through the support profile. 
References: 

https://help.salesforce.com/articleView?id=admin_sharing.htm&type=5