A deployIfNotExists assignment must remediate existing noncompliant resources. Which two elements should be checked? Select TWO.

1. The assignment identity's required permissions
2. Change the effect to audit and expect repairs
3. An appropriate remediation task for existing resources
4. Global Administrator for every application user