HOTSPOT
You are the administrator for your company’s Azure environment.
A developer creates an application that needs to access resources in external systems. The application will be
deployed in the domain.
You need to use the Azure Command-Line Interface (CLI) to create a service principal.
How should you configure the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer: 
Explanation:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-authenticate-service-principalcli
URI+Reader should be sufficient
Why not Network path & Reader
or file path & Reader
when it state unvalidated URI, then the URI could be wrong, as it not validated yet.
So if Networkpath is not the answer of the first box, then filepath could be the answer.
second box : I feel reader is the right answer.
URI + reader
By default a service principal is set to Contributor, so why wouldn’t this be unvalidated URL and Contributor?