Microsoft 70-243 Question Answer

You have a System Center 2012 R2 Configuration Manager Service Pack 1 (SP1) environment. The environment contains three primary sites named SiteA, SiteB, SiteC. You create a new collection that contains the servers in SiteB and SiteC.
You create a new Active Directory user named Support1.
You need to ensure that Support1 can perform the following tasks in SiteB and SiteC:

The solution must minimize the number of permissions assigned to Support1.
What should you do?

A. Add Support1 as an administrative user. Assign the Full Administrator security role to Support1. Remove all of the collection scopes from Support1. Add the new collection tothe scope of Support1.
B. Add Support1 as an administrative user. Assign the Infrastructure security role to Support1. Remove the Default security scope of the type Collection from Support1. Add the new collection to the scope of Support1.
C. Add Support1as an administrative user. Assign the Full Administrator security role to Support1. Remove the Default security scope of the type Collection from Support1. Add the new collection to the scope of Support1.
D. Add Support1 as an administrative user. Assign the Application Administrator security role to Support1. Remove all of the collection scopes Support1. Add the new collection to the scope of Support1.

Answer: D