Câu 8: SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads

You have an Azure key vault named KV1 that uses role-based access control (RBAC) authorization. KV1 stores database connection strings for an Azure App Service web app named App1. You enable a firewall on KV1 and allow access to KV1 from only the virtual network that contains App1. You need to ensure that App1 can retrieve secrets from KV1 without using credentials stored in the application configuration. What should you create?

1. A. an access policy for KV1
2. B. an app registration for App1
3. C. a private endpoint for KV1
4. D. a managed identity for App1 — đáp án hiện tại