Power Platform Security and Governance Flashcards
What rules is the Power Platform governed by?
Power Platform Security and Governance
Microsoft Online Services Terms
Microsoft Enterprise Privacy Statement
What is the primary resource for Power Platforms compliance information?
Power Platform Security and Governance
Microsoft Trust Centre
What development lifestyle does the Power Platform development team follow?
Power Platform Security and Governance
Security Development Lifecycle (SDL)
TRUE OR FALSE: Users can be a risk in terms of security.
Power Platform Security and Governance
TRUE
A user can unintentially cause risk to a system for many unknowning reasons (E.g. leaving the device unlocked, unsecure passwords, sharing sensitive data with unauthorized personel etc.)
What are the Data Loss Prevention (DLP) policies used to do?
Power Platform Security and Governance
To act as guardrails to help prevent users from unintentionally exposing organizational data.
What is Data Loss Prevention (DLP) policies feature?
Power Platform Security and Governance
Rules that can be defined at the environment or tenant level that help prevent security risks associated with users.
What are the 3 types of connectors in terms of DLP?
Power Platform Security and Governance
Business
Non-Business
Blocked
What creating a new DLP policy, what is the default connector?
Power Platform Security and Governance
Non-Business
Describe the Business Connector.
Power Platform Security and Governance
Connectors that host business -use data.
Describe the Non-Business Connector.
Power Platform Security and Governance
Connectors that host personal-use data.
Describe the Blocked Connector.
Power Platform Security and Governance
Connectors that you want to restrict usage across one or more environments.
Where can you create and modify DLP policies?
Power Platform Security and Governance
Power Platform Admin Centre
What makes Power Platform (Microsoft) so good for compliance with governance of data?
Power Platform Security and Governance
They have a highly detailed and coprehensive set of compliance offerings (Including certifications and attestations).
TRUE OR FALSE: Data in transit betwen user devices and Microsoft Datacentres are secure.
Power Platform Security and Governance
TRUE
Connections established between users and the datacentres are encrypted and all public endpoints are secured using industry-sandard TLS.
What kind of security do public endpoints have in Microsoft?
Power Platform Security and Governance
Transport Layer Security (TLS)