How should you configure the command?

HOTSPOT
You are the administrator for your company’s Azure environment.
A developer creates an application that needs to access resources in external systems. The application will be deployed in the domain.
You need to use the Azure Command-Line Interface (CLI) to create a service principal.
How should you configure the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Explanation/Reference:
Explanation:
The default role for a service principal is Contributor. This role has full permissions to read and write to an Azure account, and is usually not appropriate for applications. The Reader role is more restrictive, providing read-only access.
References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-authenticate-service-principal-cli
https://docs.microsoft.com/en-us/rest/api/