What should you configure to allow the virtual machines to access the key vault?

You plan to deploy an SAP environment on Azure.

You plan to store all SAP connection strings securely in Azure Key Vault without storing credentials on the

Azure virtual machines that host SAP.

What should you configure to allow the virtual machines to access the key vault?
A . Azure Active Directory (Azure AD) Privilege Identity Manager (PIM)
B . role-based access control (RBAC)
C . a Managed Service Identity (MSI)
D . the Custom Script Extension

Answer: C

Explanation:

To reference a credential stored in Azure Key Vault, you need to: