[&] INE Industries (INE) purchased ACME Industrial Supplies (ACME) and is integrating control of the ACME Azure resources under INE Industries.  The ACME subscription has been moved under the INE tenant and all of the ACME administrator accounts have been added to the INE tenant as guest accounts.  The ACME admins can no longer access their Azure resources.  What is the most likely cause of this?
- The managed identities for the resources need to be updated.
- All RBAC role assignments are removed when a subscription is moved from one tenant to another.
- The resource ids of all resources are changed when a subscription is moved from one tenant to another
- Azure resources can only be managed by cloud or hybrid accounts.

[&] INE confectioners has a web app that uses Azure AD for authentication.  INE implements DevOps practices and the web app life cycle has three stages - development, testing, and production. The development team needs complete control of the application during development.  INE wants to implement testing in production to optimize their release process.  What is the most appropriate tenant design.
- Provision three tenants - dev, test, and production.  Make the dev team the global administrators for the dev and test tenants, and the production administrators the global admins for the production tenant.
- Provision one tenant and use it for each stage of the life cycle.
- Provision three tenants - dev, test, and production.  Set different global admins for each tenant.
- Provision two tenants - dev and production.  Make the dev team the global admins for the dev tenant and the production admin team the global admins for the production tenant.  Use the production tenant for the test deployment.
- Provision three tenants - dev, test, and production.  Make the dev team the global administrators for the dev tenant, and the production administrators the global admins for the test and production tenants.