Which Azure service should you use to store certificates?

Azure Key Vault is the correct service because it is specifically designed to securely store and manage cryptographic keys, secrets, and certificates. It provides a centralized cloud service for encrypting keys and small secrets like passwords, which includes certificates. Azure Security Center is for unified security management and threat protection, not certificate storage. An Azure Storage account is for general-purpose blob, file, queue, and table storage, not secure certificate management. Azure Information Protection is a cloud-based solution for classifying and protecting documents and emails, not for storing certificates themselves.