Which Azure service should you use to store certificates? (AZ-900)

Correct answer: C) Azure Key Vault.
Azure Key Vault is a secure storage service that allows you to store and manage sensitive data such as certificates, keys, and secrets. It provides a secure way to store and retrieve these sensitive data, and it also provides features such as encryption, access controls, and auditing.
Azure Security Center (A) is a cloud security service that provides threat protection and security monitoring for Azure resources. It does not provide a storage service for certificates.

Azure Storage account (B) is a cloud-based object storage service that allows you to store and retrieve large amounts of data. While it can be used to store certificates, it is not a secure storage service and does not provide the same level of security and access controls as Azure Key Vault.
Azure Information Protection (D) is a cloud-based solution that provides data protection and encryption for sensitive data. While it can be used to protect certificates, it is not a storage service and does not provide a secure way to store and retrieve certificates.

In summary, Azure Key Vault is the recommended service for storing certificates in Azure.