Exam SC-300 topic 2 question 98 discussion

stupid question, we can use RBAC or access policy, but to do that we also have to configure the resource (key vault) access settings. so it is either A or D https://learn.microsoft.com/en-us/azure/frontdoor/managed-identity "Configure Key Vault access You can configure Azure Key Vault access using either of the following methods: Role-based access control (RBAC) - Provides fine-grained access control using Azure Resource Manager. Access policy - Uses native Azure Key Vault access control. For more information, see Azure role-based access control (Azure RBAC) vs. access policy."

Secrets User, can also be configured directly on vault, would be a more fine grained solution.

Correct Answer: D. Assign an Azure role to VM1 Explanation: VM1 has a system-assigned managed identity, which allows it to authenticate to Azure resources without storing credentials. However, by default, it does not have permissions to access Vault1. To allow VM1 to retrieve secrets from Vault1, you must assign it an Azure role with appropriate permissions to Key Vault.