Describe the security management capabilities in Azure

Microsoft Defender for Cloud

Security + Compliance + Threat Protection across all clouds.

DevSecOps

Security everywhere, all the time.

Cloud security posture management (CSPM)

Cloud Security Posture Management → posture = how secure your cloud stands.

Cloud workload protection platform (CWPP)

protects workloads while they run.

Microsoft cloud security benchmark (MCSB)

It tells you how to configure securely across Azure and multicloud.

Cloud Security Posture Management (CSPM).

helps you efficiently and effectively improve your security, and gives you visibility into your current security situation.

security information and event management (SIEM)

collects and analyzes logs/events (Sentinel).

symmetric encryption

same single key to both encrypt and decrypt the data. It is fast and typically used for bulk data encryption (like files on a hard drive).

Asymmetric encryption

public/private key pair. Anyone can use the public key to encrypt, but only the holder of the private key can decrypt it. It is slower but highly secure for key exchanges.

What is "Encryption at Rest" and what is its primary purpose?