A healthcare provider wants to prevent deletion of critical Azure resources. What should they configure?

Azure Resource Locks prevent accidental deletion or modification of critical Azure resources. They can be set to "CanNotDelete" to prevent deletion, or "ReadOnly" to prevent both deletion and modification. This directly addresses the requirement to prevent deletion of critical resources. Azure Key Vault is used for securely storing secrets like keys and certificates, not for preventing resource deletion. Azure Policy helps enforce organizational standards and assess compliance, but it doesn't directly prevent resource deletion in the same way a lock does; it would require a policy definition to audit or deny deletion, which is a different mechanism. Azure Blueprints define a repeatable set of Azure resources that implement and adhere to standards, but they don't inherently prevent deletion of deployed resources.