Which Azure service centrally stores secrets, certificates, and cryptographic keys with IAM access policies and audit?
- Azure DNS
- Azure Storage Account (any tier)
- Azure Key Vault
- Azure Front Door
Show answer and solution
Correct answer: C. Azure Key Vault
Key Vault is the canonical secret + key + cert store with Entra-integrated access policies.
The other services don't manage secrets at scale.