Which Key Vault tier supports Hardware Security Module (HSM)-backed keys with FIPS 140-2 Level 2 validation?

1. A Standard tier (software keys only)
2. ✓ B Premium tier (HSM-backed keys) (correct answer)
3. C Both tiers
4. D Neither; HSM requires a dedicated HSM

Shortcut: Key Vault Premium tier stores keys in HSMs validated to FIPS 140-2 Level 2. For FIPS 140-2 Level 3, use Azure Managed HSM (a separate service).