Your team needs to deploy several Azure Resource Manager templates. These templates will refer to secrets stored in the Azure Key Vault service. You have to recommend the right solution. That will access to the secrets in the Key Vault during the deployment of the Azure Resource Manager templates. You have to ensure the solution that uses the principle of least privilege. 
Which of the following would you use to restrict access to the secrets stored in the Key Vault?

Answer options:

A.Azure Key vault access policy
B.A Personal Access Token
C.OAuth 2.0
D.RBAC

Answer – A 
For data plane access to the key vault, you can use Key Vault access policies. 
The Microsoft documentation mentions the following. 

Since this is a definite option from the documentation given, all other options are incorrect. 
For more information on securing the Key Vault, please visit the following URL- 

https://docs.microsoft.com/en-us/azure/key-vault/general/secure-your-key-vault