What are the two roles that allow you to create a resource exemption in Azure Security Center?

Answer options:

A.Security Admin
B.Owner
C.Security Reader
D.Resource Policy Contributor

Correct Answers: B and D Option B & D are correct. To create a resource exemption in ASC, your user account needs to be granted elevated access rights, such as Owner or contributor.
Option A & C are incorrect. These roles don’t have rights to exempt resources.
Reference: 

https://techcommunity.microsoft.com/t5/azure-security-center/resource-exemption-in-azure-security-center/ba-p/1703052