A deployIfNotExists policy assignment is intended to remediate existing resources. Which two elements are typically required for remediation? Select TWO.

1. Subscription Owner for every affected application user
2. An assignment managed identity with the necessary resource permissions
3. Changing the effect to audit
4. A remediation task for the existing noncompliant resources