Azure Security Center Flashcards
What are the primary roles of (Defender for Cloud) Azure Security Center?
Security Assessment and Remediation
Explain what Cloud Defender Cloud Security Posture Management is?
Microsoft Defender Cloud Security Posture Management (CSPM) is a comprehensive solution designed to enhance the security posture of cloud environments across multiple platforms, including Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). It provides organizations with the tools to assess, monitor, and improve their cloud security by identifying vulnerabilities, misconfigurations, and compliance issues.
Key Features of Microsoft Defender CSPM:
Continuous Assessment: Defender CSPM continuously evaluates cloud resources to detect security risks and misconfigurations, offering actionable recommendations to mitigate potential threats.
Secure Score: This feature quantifies an organization’s security posture, enabling prioritization of remediation efforts based on potential impact.
Compliance Management: Defender CSPM assists in aligning with industry standards and regulatory requirements by providing assessments and tracking compliance over time.
Multicloud Support: The solution extends its security assessments and recommendations across various cloud platforms, ensuring consistent security measures in multicloud environments.
Data Security Posture Management: It automatically discovers data resources across clouds, evaluates data sensitivity and exposure, and identifies risks that could lead to data breaches.
By leveraging Microsoft Defender CSPM, organizations can proactively identify and address security vulnerabilities, maintain compliance, and strengthen their overall cloud security posture.
What is security posture?
Access thet is known and understood:
Identity
Networks
Data
What is the least privilege?
The users only get the least privilege required to access something.
What is JIT/JEA?
It is when a user is just given access for the duration they need.
What is compliance?
Are you adhering to a set of standards imposed by a an authoritative body?
What is CSPM?
Security Posture Management
What is CWP
Cloud Workload Protection