A company is planning to deploy a server application to an Azure virtual machine. This will be running Windows Server 2019. The company also has an Azure Key Vault that stores secrets. You have to secure the key vault to secure API secrets for third-party integrations. Which of the following would you implement for this requirement? Choose three answers from the options given below.

Answer options:

A.Configure Role-based access control for the vault.
B.Change the application code to access the key vault.
C.Implement a Key Vault access policy.
D.Configure Azure Desired State Configuration.
E.Configure a system-assigned managed identity for the virtual machine.

Answer – B, C and E 
To configure secure access to the key vault from the virtual machine, you will assign a managed identity to the virtual machine. Then via Access policies, you will give access to the key vault for the virtual machine managed identity. And then change the application code to request access to the key vault via the Managed identity. 
Option A is incorrect because you have to configure access policies for the key vault and not role-based access control. 
Option D is incorrect because you have to change the application code. 
For more information on an example on using managed identities for an Azure virtual machine, one can browse to the following URL- 

https://docs.microsoft.com/en-us/azure/key-vault/general/tutorial-net-virtual-machine