identify the permission that must be granted to the application.

HOTSPOT
You administer an Azure Active Directory (Azure AD) tenant.
You add a custom application to the tenant.
The application must be able to:
 Read data from the tenant directly.
 Write data to the tenant on behalf of a user.
In the table below, identify the permission that must be granted to the application. Make only one
selection in each column.

Answer:

Explanation:
http://msdn.microsoft.com/en-us/library/azure/dn132599.aspx