The company updated its security policy: any sensitive, regulated workloads must run on physical servers that are not shared with other AWS customers or with other AWS accounts belonging to the company. Which deployment option enforces this requirement?

Dedicated Hosts provide physical servers dedicated to your use, offering visibility into the underlying sockets and physical cores. This option directly addresses the requirement for workloads to run on physical servers not shared with other AWS customers or accounts, as you have exclusive access to the entire physical server. Dedicated Instances run on hardware dedicated to a single customer, but multiple instances from that customer's various accounts can share the same physical server. This doesn't meet the "not shared with other AWS accounts belonging to the company" requirement. Reserved Instances are a billing discount and do not dictate the underlying hardware tenancy. Placement groups are for network performance optimization and do not guarantee dedicated physical hardware.