A Is correct because creating a cluster with Stackdriver Logging option will enable all the container logs to be stored in Stackdriver Logging.
B Is not correct because creating a cluster with Stackdriver Monitoring option will enable monitoring metrics to be gathered, but it has nothing to do with logging.
C is not correct, because even if you can develop a Kubernetes addon that will send logs to BigQuery, this is not a Google-recommended practice.
D is incorrect because this is not a Google recommended practice.
E Is correct because Stackdriver Logging support exporting logs to BigQuery by creating sinks (see links below).
https://cloud.google.com/kubernetes-engine/docs/how-to/logging
https://cloud.google.com/logging/docs/export/configure_export_v2
https://kubernetes.io/docs/reference/labels-annotations-taints/

Always grant access to apis first in order to use GCP services

Workspaces is made for monitoring multiple projects.

The proper answer regarding to bigquery roles is the listed in the options, the proper rol that resolve this requirement is: roles/bigquery.dataViewer
https://cloud.google.com/bigquery/docs/access-control#custom_roles
On the other hand, the question explicitly is asking to use the GCP best practices on IAM:
GCP Best Practices explain clearly these rules:
Policy management
- Set organization-level IAM policies to grant access to all projects in your organization.
- Grant roles to a Google group instead of individual users when possible. It is easier to add members to and remove members from a Google group instead of updating an IAM policy to add or remove users.
- If you need to grant multiple roles to allow a particular task, create a Google group, grant the roles to that group, and then add users to that group.
https://cloud.google.com/iam/docs/using-iam-securely#policy_management