👨‍🦱 💬 Azure Key Vault allows for secure storage of application secrets, encryption keys, and certificates.

👨‍🦱 💬 This is true. Azure Disks can be encrypted using customer-managed keys with use of Azure Key Vault.

👨‍🦱 💬 This is false. All disks are encrypted by default using Microsoft-managed keys unless the customer chooses to disable that.

👨‍🦱 💬 All of the above. Anything that can potentially expose your services to potential unauthorized access or attacks can and should be stored as a secret.

👨‍🦱 💬 This is false. Azure Key Vault should be only used to store sensitive information. It is not designed to replace application configuration files, just compliment them by externalizing management of their sections which are considered sensitive.

👨‍🦱 💬 Azure Security Center provides a unified experience for securing Azure platforms by providing actionable recommendations and analysis of potential threats.