Identity, Access and Security

Question 1

What’s the difference between Authentication and Authorization?

Answer 1

Authentication = verification of identity

Authorization = granting permission

Question 2

What is Azure Active Directory (Azure AD)?

Answer 2

Azure’s identity and access management service. Cloud version of Active Directory.

Question 3

What is Azure AD Tenant?

Answer 3

An instance of Azure AD representing an organization with distinct identities and settings.

Question 4

What is Single sign-on (SSO)?

Answer 4

Signing in multiple independent software systems with only one set of credentials managed by Azure AD.

Question 5

What is Multi-Factor Authentication? What 3 types are known?

Answer 5

Combining two or more methods of authentication.

Classic credentials plus..

…something that we know (passwords, questions)
…something that we have (trusted device)
…something that we are (biometrics)

Question 6

What are 3 passwordless options in Azure AD?

Answer 6

Windows Hello for Business = face recognition, 4-digit PIN

Microsoft Authenticator app = app on user’s phone, PIN or biometrics

FIDO2 Security Key = open standard for passwordless devices like finger prints, etc…

Question 7

What is RBAC?

Answer 7

Role-based Access Control

Access management to configure access for users or groups to resources based on three questions:

Who? (User, Group, Admin)
What? (Owner, Reader, Data operator, custom roles)
What scope? (Management group, Subscription, Resource Group, Resource)

Question 8

What is Zero trust and its principles?

Answer 8

Modern security concept with the following principles:

Assume breach (encryption, segmentation, analytics, threat detection, continuous monitoring, updates)
Use least privilege access (just enough)
Verify explicitly (use all dfata points and every opportunity to authenticate and authorize)

“Assume breach, never trust, always verify”

Question 9

What are the 7 layers of In-depth security?

Answer 9

1. Physical (building)
2. Identity & Access (Azure AD, SSO, MFA)
3. Perimeter (DDos protection, FWs)
4. Network (limited communication between resources)
5. Compute (secure access to VMs)
6. Application (secure app design without vulnerabilities)
7. Data (secure storage, encryption)

Question 10

What is Security posture?

Answer 10

Security score that continuously assesses our security situation