Your team needs to deploy several Azure Resource Manager templates. These templates will refer to secrets stored in the Azure Key Vault service. You have to recommend the right solution. It will access to the secrets in the Key Vault during the deployment of the Azure Resource Manager templates. You have to ensure the solution that uses the principle of least privilege. 
Which of the following would you use to restrict access to delete the key vault?

Answer options:

A.Azure Key value access policy
B.A Personal Access Token
C.OAuth 2.0
D.RBAC

Answer – D 
For control plane access to the key vault, you can use Role-based access control. 
The Microsoft documentation mentions the following. 

Since this is a definite option from the documentation given, all other options are incorrect. 
For more information on securing the Key Vault, please visit the following URL- 

https://docs.microsoft.com/en-us/azure/key-vault/general/secure-your-key-vault