What should you do?

You have an Azure subscription that contains an Azure key vault named Vault1.

In Vault1, you create a secret named Secret1.

An application developer registers an application in Azure Active Directory (Azure AD).

You need to ensure that the application can use Secret1.

What should you do?
A . In Azure AD, create a role.
B . In Azure Key Vault, create a key.
C . In Azure Key Vault, create an access policy.
D . In Azure AD, enable Azure AD Application Proxy.

Answer: C

Explanation:

"You may need to configure the target resource to allow access from your application. For example, if you request a token to Key Vault, you need to make sure you have added an access policy that includes your application’s identity. Otherwise, your calls to Key Vault will be rejected, even if they include the token"

https://docs.microsoft.com/en-us/azure/app-service/overview-managed-identity?tabs=dotnet