HOTSPOT
You develop a SharePoint-hosted app that is used by internal users to read and write data.
The app has the following requirements:
The app must be able to find and display the products that are purchased most often by customers.
The app must be able to read product information from a custom SQL Server database by using an external
list.
The app must be able to read from and write to the user profile.
The app must be able to make changes to lists by using the minimum permissions necessary.
The app must be able to read enterprise keywords.You need to configure permissions for the app.
Which scopes and permissions should you use? (To answer, select the appropriate options from each dropdown list in the answer area.)
Hot Area:
Answer: 
Explanation:
Box 1: Search
QueryAsUserIgnoreAppPrincipal
To provide proper permissions to have search in SharePoint hosted app, open the Appmanifest.xml and
provide the permissions to search as scope and select the permission “QueryAsUserIgnoreAppPrincipal”.
Box 2: BCSBusiness Connectivity Services (BCS) need read as the app must be able to read product information from a
custom SQL Server database by using an external list.
Box 3: Write
User Profiles scope require write as the app must be able to read from and write to the user profile.
Box 4: Manage
Web permissions should be manage as the app must be able to make changes to lists by using the minimum
permissions necessary.
Box 5: Taxonomy
For taxonomy, only rights for Read and Write are available. Here read is fine as the app must be able to read
enterprise keywords
App permissions in SharePoint 2013