What is the correct approach for a workload requiring FIPS 140-2 Level 3 key protection?
- A Standard tier vault
- B Premium tier vault with HSM-backed keys, or Managed HSM (correct answer)
- C Storing keys in App Configuration
- D Software keys with rotation
Shortcut: HSM-backed keys in the Premium tier, or a dedicated Managed HSM pool, provide hardware key protection at FIPS 140-2 Level 3. Standard tier uses software-protected keys.