Home › Azure AZ-204 › cloudcomputing › az204security › Which Azure service centrally stores secrets, ce…
Which Azure service centrally stores secrets, certificates, and cryptographic keys with IAM access policies and audit?
AAzure DNS
BAzure Storage Account (any tier)
CAzure Key Vault
DAzure Front Door
Answer & Solution
Correct answer: C. Azure Key Vault
Key Vault is the canonical secret + key + cert store with Entra-integrated access policies. The other services don't manage secrets at scale.
Related questions
Which Azure feature continuously scans App Service / Function code for known vulnerabilitiWhich type of Microsoft Identity token does a client present to a downstream API to prove Which configuration lets an Azure Function access a SECRET stored in Key Vault via an App An Azure Function needs to read a secret from Key Vault on every cold start. What's the MOAn Azure Web App needs to authenticate users with Entra ID without writing OAuth code. WhiWhich Azure feature lets an admin grant a role assignment that's only ACTIVE for an approvWhich Azure feature lets a developer call `DefaultAzureCredential` from the Azure SDK and Which configuration gives an Azure VM, App Service, or Function App an identity to call Ke