Designing Microsoft Azure Infrastructure Solutions AZ-305 — Question 25

You plan to deploy an application named App1 that will run on five Azure virtual machines. Additional virtual machines will be deployed later to run App1. You need to recommend a solution to meet the following requirements for the virtual machines that will run App1: • Ensure that the virtual machines can authenticate to Azure Active Directory (Azure AD) to gain access to an Azure key vault, Azure Logic Apps instances, and an Azure SQL database. • Avoid assigning new roles and permissions for Azure services when you deploy additional virtual machines. • Avoid storing secrets and certificates on the virtual machines. • Minimize administrative effort for managing identities. Which type of identity should you include in the recommendation?