An organization is using Azure Key Vault to store encryption keys. They must ensure that the keys are stored in a physical Hardware Security Module (HSM) that is FIPS 140-2 Level 3 compliant and that Azure administrators cannot access the key material. Which Key Vault tier or service should they use?

An organization wants to use Azure AD (now Microsoft Entra ID) to manage access to their on-premises applications without using a VPN or opening firewall ports. Which feature enables this secure remote access?

Which Azure service provides an automated way to discover, classify, and protect sensitive data (like credit card numbers) in your Azure SQL databases and Blob storage?

Which identity feature allows an organization to provide access to their Azure resources for external contractors who use their own corporate or social identities (like Google or Microsoft accounts)?

An organization wants to analyze their Azure environment's security posture and receive a 'Secure Score' with actionable recommendations to improve their compliance with the Azure Security Benchmark. Which tool provides this?

To secure access to an Azure Key Vault so that only a specific Azure Virtual Machine can retrieve secrets, without using a password or service account secret, which identity feature should you use?