Describe identity, governance, privacy, and compliance features (20- 25%)

Question 1

Explain the difference between authentication and authorization

Answer 1

Authentication is a user proving who their are.

Authorisation is what a user is permitted to do.

Question 2

Describe the functionality and usage of Conditional Access, Multi-Factor Authentication (MFA), and Single Sign-On (SSO)

Answer 2

MFA, is 3FA something you know, something you have, something you are. Conditional access, is additional authentication level for unusual login attempts. E.g. IF out of office, THEN prompt MFA.

Question 3

Describe the functionality and usage of Azure Active Directory

Answer 3

Secure, centralised identity provider, reduced development time, easier support

Question 4

Define Azure Active Directory

Answer 4

Identity as a service. Complete solution for managing user, groups and roles.

Question 5

Describe the functionality and usage of Role-Based Access Control (RBAC)

Answer 5

Roles have different permissions assigned, assign users to roles. Reader, Contributor, Owner.

Question 6

Describe the Cloud Adoption Framework for Azure

Answer 6

Journey from on-prem to cloud adoption documentation, guidance and tools.

Question 7

Describe the functionality and usage of Azure Blueprints

Answer 7

Templates that create users, roles and policies which can be assigned to NEW subscriptions.

Question 8

Describe the functionality and usage of Azure Policy

Answer 8

Governance sets rules and policies over subscriptions. Eg. Allowed locations, allowed server versions, default tags, allowed virtual machines.

Question 9

Describe the functionality and usage of tags

Answer 9

Resource tags, metadata which can be searched and acted upon with automation and for financial or other reasons.

Question 10

Describe the functionality and usage of resource locks

Answer 10

Lock a resource, means read only and cannot delete.

Question 11

Describe the Microsoft core tenets of Security, Privacy, and Compliance

Answer 11

TRUSTED CLOUD, Azure is built with security in mind, privacy, your data is your own. Compliance, following standards and ISOs.

Question 12

Describe the purpose of the Microsoft Privacy Statement, Product Terms site, and Data Protection Addendum (DPA)

Answer 12

privacy.microsoft.com. Agreements and PERSONAL DATA THAT AZURE COLLECTS, Azure tells you what and why. TERMS OF SERVICE.

Question 13

Describe the purpose of the Trust Center

Answer 13

Documentation for the Trusted Cloud.

Question 14

Describe the purpose of the Azure compliance documentation

Answer 14

Documentation claims to be compliant with certain documentation. ISOs and GDPR etc.

Question 15

Describe the purpose of Azure Sovereign Regions (Azure Government cloud services and Azure China cloud services)

Answer 15

Runs on different hardware and isolated datacentres for governments, Azure China etc.