HOTSPOT You have an Azure subscription that contains an Azure key vault named Vault1. an Azure pipeline named Pipeline1, and an Azure SQL database named DB1. Pipeline1 is used to deploy an app that will authenticate to DB1 by using a password. You need to store the password in Vault1. The solution must ensure that the password can be accessed by Pipeline1. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. 
Ugh, Azure loves to switch up between policies and RBAC in these questions. For this one, it's store as a secret and adjust access policies, since no RBAC requirement is mentioned. Seen similar on other practice sets.
Store the password as a secret, then grant Pipeline1 access by updating Vault1's policies. That's the common way in Azure Key Vault for pipelines-secrets hold passwords, and policies control access. Saw similar steps in the official docs and practice labs.
