A company wants to have a service that could fulfil the below requirement 
“Provide the ability to generate keys in hardware security modules that never leave the hardware security module boundary” 
Which of the following service could be used for this requirement?

Answer options:

A.Azure Key vault
B.Azure Security Center
C.Azure Advisor
D.Azure Network Security Groups

Answer – A 
You can achieve this requirement with the help of the Azure Key vault service 
The Microsoft documentation mentions the following 

Since this is clear from the documentation, all other options are incorrect 
For more information on the Key vault service, please visit the below URL 

https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview