You need to meet the LabelMaker application security requirement.

What should you do?

A. Create a conditional access policy and assign it to the Azure Kubernetes Service cluster.

B. Place the Azure Active Directory account into an Azure AD group. Create a ClusterRoleBinding and assign it to the group.

C. Create a RoleBinding and assign it to the Azure AD account.
D. Create a Microsoft Azure Active Directory service principal and assign it to the Azure Kubernetes Service (AKS) cluster.

Explanation:
Scenario: The LabelMaker applications must be secured by using an AAD account that has full access to all namespaces of the Azure Kubernetes Service (AKS) cluster.

Permissions can be granted within a namespace with a RoleBinding, or cluster-wide with a ClusterRoleBinding.

References:
https://kubernetes.io/docs/reference/access-authn-authz/rbac/