310-202 Question #178: Real Exam Question with Answer & Explanation

You are setting up a new help desk technician. The help desk technician is responsible for administering all user privilege aspects. The technician must be able to answer user requests for forgotten passwords and set and change user passwords. The new technician must also be able to read the configuration files related to other users. However, the technician's supervisor must make any changes that are required. The help desk technician will use the login name of helpdesk4. The userid of helpdesk4 has already been created as an unprivileged user. Which two commands add the authority to the helpdesk4 user to change user passwords, but only allow read-only access to user and role configuration files? (Choose two.)