A company is currently planning to set up resources as part of its Azure subscription. They are looking at different security options that can be used to secure their Azure environment. 
Which of the following could be used for the following requirement? 
“Provide a store that can be used to store secrets.”

Answer options:

A.Azure Key Vault
B.Azure Network Security Groups
C.Azure Multi-Factor Authentication
D.Azure DDoS Protection

Answer – A 
You can store secrets in the Azure Key Vault service. 
The Microsoft documentation mentions the following. 

Option B is incorrect since this is used to restrict traffic into and out of Azure virtual machines. 
Option C is incorrect since this is used to provide an extra level of security during user authentication. 
Option D is incorrect since this is used to protect against Distributed denial of service (DDoS) attacks. 
For more information on the Azure Key Vault service, please visit the below URL- 

https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview