You have an Azure subscription named Sub1 that contains the resources shown in the following table. 

You need to ensure that you can provide VM1 with secure access to a database on SQL1 by using a contained database user. What should you do? 

Answer options:

A. Enable a managed identity on VM1.
B. Create a secret in KV1.
C. Configure a service endpoint on SQL1.
D. Create a key in KV1.

B