Here is the question:

A company plans to synchronize users in an existing Active Directory organizational unit with Office 365. You must configure the Azure Active Directory Synchronization (AAD Sync) tool with password sync.
You need to ensure that the service account has the minimum level of permissions required.
Which two permission levels should you assign to the account for each task? To answer, select the appropriate permission level from each list in the answer area. 

You'll find it here: Install the Azure Active Directory Sync Service https://msdn.microsoft.com/en-us/library/azure/dn757602.aspx :)

The question has an error in it actually - there's no such thing as Create Password - that should be Change Password. So the first one is Reset and Change/"Create" Password.

The second is Replication Directory Changes and Replicating Directory Changes All. That question is also incorrect actually. You want to grab Replicating Directory Changes in Filtered Set too if you have RODCs and the AAD Sync/Connect machine is going to possibly hit an RODC.