A team wants to use Key Vault to manage TLS certificates for an Azure Application Gateway. Which Key Vault object type should the certificate be stored as?
- A Secret (PFX base64 encoded)
- B Key (RSA)
- C Certificate (native Key Vault cert with lifecycle management) (correct answer)
- D Both Secret and Certificate
Shortcut: Store the certificate as a Key Vault Certificate object. Application Gateway can reference it directly via managed identity. Key Vault handles renewal; Application Gateway pulls the latest version automatically.