Q14 Key Vault Domain 4 · 20–25% of exam

An organization needs FIPS 140-2 Level 3 validated key storage. What Azure service provides this beyond Key Vault Premium?

  1. A Azure Dedicated HSM
  2. B Azure Managed HSM (correct answer)
  3. C Azure Key Vault Premium is Level 3
  4. D Azure Security Center

Shortcut: Azure Managed HSM provides FIPS 140-2 Level 3 validated, single-tenant HSM service. Key Vault Premium uses Level 2 HSMs. Azure Dedicated HSM provides the physical device for maximum control.