SC-900 flash cards
Chapter 1
Zero-Trust guiding principles
- Always Verify: Always authenticate and authorize access based on all available elements, includes a user’s identity, location, device health, data classification, service or workload
- Use least privilege access: use just-in-time (JIT) & just-enough-access (JEA) for better data protection
- Assume breach: Always assume an attacker has gained some access to the environment.
What is the new perimeter and preferred control plane?
Identity, has become the new preferred perimeter and control plane for the entire infrastructure
Zero-Trust model
Not trusting anything and always verifying
trustworthiness explicitly.
Six Pillar of Zero-Trust
- Identity
- Endpoint
- Data
- Apps
- Infrastructure
- Network
When cloud computing who’s responsible for physical security?
The Cloud service providers
Which following responsibilities are always retained by the customer:
- Data
- Endpoint
- Account
- Access management
Traditional defense-in-depth layers are?
- Data
- Application
- Host
- Internal network
- Perimeter
- Physical Security
- Policies, people, process
What model approach is DDoS protection found?
Defense-in-Depth
Key capabilities for Applications to handle massive amounts of traffic
High availability
Scale-out
Resiliency
Fault-Tolerance
Attack surface area reduction
Common Threats
- Malware
- Phishing attacks
- Denial of Service (DOS) & Distributed Denial of service (DDoS)
- Ransomware
- Botnet
What is a Malware
Malicious application an code that can cause damage and disrupt the normal use of devices
Phishing Attacks
Attempt to steal sensitive information through emails, websites, text messages, or other forms of electronic communication.
Denial of Service (DoS) and Distributed Denial of Service (DDoS
Disrupts businesses by limiting the function of a network application or exhausting a computing resource until it becomes unavailable.
Botnet
is a network of compromised devices that an attacker
controls without the knowledge of their owners.
Which one of the CIA pillars does a DoS or DDoS attack affect
Availability
What is authentication?
the act of something or someone proving its identity to
something else.
What is the abbreviation for authentication?
AuthN
What is the most common form of multifactor authentication?
Text messages or phone calls
What is OTP & What does it do?
One-time-passcode:
where the passcode can be used only once and is usually good for a limited time. Authenticator apps, such as the Microsoft Authenticator app, send a push notification to the device that is approved by the user.
What is authorization?
Once the system
or services knows who you are—authentication—you have rights or
permissions to do things—authorization.
What is authorization abbreviated as?
AuthZ
If you want to set up a specific role assigned to your account, you might have inherited permissions in the system to add, modify, delete, or view things. what control must you implement?
A Role-Based Access Control (RBAC)
What role manages all aspects of Azure Active Directory?
Global administrator
What is a Global reader?
Same as Global administrator except without the ability to make any changes?
