Azure Identity, Access & Security

How is Azure RBAC enforced?

Azure Role-Based Access Control (RBAC) is enforced by Azure Resource Manager. A management service that allow organizing and securing cloud resources.

What is the Zero Trust model about?

Zero Trust is a security model that assumes the worst case scenario and protects resources with that expectation. It verifies each request as though they originated from an uncontrolled network.

In a defense-in-depth strategy, what should you do with the Perimeter layer?

Use DDoS protection to prevent large-scale attack. Setup perimeter firewall to block malicious attack on your network.

In a defense-in-depth strategy, what is Identity & Access layer for?

The I&A layer is about verifying identity (SSO, MFA), ensuring that access is granted only to what’s needed, that sign-ins and events are logged and can be trailed.

In a defense-in-depth strategy, what should you do with the Network layer?

Control traffic between resources tightly, setup security rules to restrict outbound and inbound traffic.

What Azure service allow you to securely store secrets, encryption keys and certificates?

Azure Key Vault allows you to manage secret credentials, encryption key pairs and TLS/SSL certificates. It also supports key rotation and certificate auto-renewal.

What does Microsoft Defender for Cloud do?

Defender for Cloud is a cloud security manager and threat protection service. It monitors cloud/on-prem/hybrid or even multi-cloud resources, detects threats, resolve them, and provide recommendations on how to improve security posture.

What 3 vital needs that Defender for Cloud fulfill for you?

Continuous assessment - Identify and track vulnerabilities, run security scans and assessments.

Secure - Harden resources based on benchmark policies.

Defend - Create alerts, detect threats and provide remediation guidance.

Which Microsoft Entra tool can vary the credentials needed to log in based on signals, such as where the user is located?

Conditional Access