Exam CIS-CSM topic 1 question 235 discussion

I am choosing D because snc_external is a general external role and snc_customerservice_customer is a specific external role. Assigning both to one person violates any infosec rule providing such a wide range of general and specific permissions.

snc_internal and sn_customerservice.partner_admin

Internal Roles External Roles Business-to-business (B2B) sn_customerservice_agent sn_customerservice_manager Business-to-business (B2B) Customer sn_customerservice.customer sn_customerservice.customer_admin sn_customerservice.customer_case_manager Business-to-consumer (B2C) sn_customerservice.consumer_agent sn_customerservice_manager Business-to-business (B2B) Partner sn_customerservice.partner sn_customerservice.partner_admin Business-to-consumer (B2C) sn_customerservice.consumer Source: https://docs.servicenow.com/bundle/vancouver-customer-service-management/page/product/customer-service-management/reference/r_RolesInstalledWithCustomerService.html

B is the right answer as snc_internal is an internal role and the other one is assigned to external users. Both the roles cannot be assigned to the same user.