You have an Azure AD tenant named contoso.com. You have an Azure subscription that contains an Azure App Service web app named App1 and an Azure key vault named...

You have an Azure AD tenant named contoso.com.
You have an Azure subscription that contains an Azure App Service web app named App1 and an Azure key vault named KV1. KV1 contains a wildcard certificate for contoso.com.
You have a user named [email protected] that is assigned the Owner role for App1 and KV1.
You need to configure App1 to use the wildcard certificate of KV1.
What should you do first?

A. Create an access policy for KV1 and assign the Microsoft Azure App Service principal to the policy. B. Assign a managed user identity to App1. C. Configure KV1 to use the role-based access control (RBAC) authorization system. D. Create an access policy for KV1 and assign the policy to User1.