You have an Azure Active Directory (Azure AD) tenant. You need to prevent nonprivileged Azure AD users from creating service principles in Azure AD. What should...

You have an Azure Active Directory (Azure AD) tenant.
You need to prevent nonprivileged Azure AD users from creating service principles in Azure AD.
What should you do in the Azure Active Directory admin center of the tenant?

A. From the User settings blade, set Users can register applications to No. B. From the Properties blade, set Access management for Azure resources to No. C. From the User settings blade, set Restrict access to Azure AD administration portal to Yes. D. From the Properties blade, set Enable Security defaults to Yes.