HOTSPOT
You are the administrator for your company’s Azure environment.
A developer creates an application that needs to access resources in external systems. The application will be
deployed in the domain.
You need to use the Azure Command-Line Interface (CLI) to create a service principal.
How should you configure the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer: 
Explanation:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-authenticate-service-principalcli
URI+Reader should be sufficient
0
0
Why not Network path & Reader
or file path & Reader
when it state unvalidated URI, then the URI could be wrong, as it not validated yet.
So if Networkpath is not the answer of the first box, then filepath could be the answer.
second box : I feel reader is the right answer.
0
0
URI + reader
0
0
By default a service principal is set to Contributor, so why wouldn’t this be unvalidated URL and Contributor?
0
0
Contributor is not for applications
https://docs.microsoft.com/en-us/cli/azure/create-an-azure-service-principal-azure-cli?view=azure-cli-latest
The default role for a service principal is Contributor. This role has full permissions to read and write to an Azure account, and is not appropriate for applications. The Reader role is more restrictive, providing read-only access
0
0