You administer a Forefront Identity Management (FIM) 2010 server in your company network. All user accounts are members of an Active Directory Domain Services (AD DS) domain. You configure user…

Adding All People to the Specific Set of Requestors on an existing MPR without properly scoping the target to the requestor's own object would grant users the ability to modify other users' profiles, not just their own.

Although worded similarly to C, this choice as presented in the context of the question refers to an incorrectly configured or insufficiently scoped MPR creation that does not properly restrict the target to the requesting user's own profile.

Creating a new Request MPR allows you to define a policy where the requestor set is 'All People' and the target resource set is scoped to 'the requestor themselves,' enforcing self-service profile editing. MPRs in FIM 2010 control authorization by binding a set of requestors, a target resource set, and allowed operations (such as attribute-level write permissions), making this the correct and precise method to grant users edit access only to their own profiles.

Copying settings of an existing User Management MPR without the correct self-service target scoping would replicate existing broad permissions rather than creating a new, correctly scoped self-update policy.