Security

Question 1

what is a firewall?

Answer 1

A set of rules that define what traffic can and cannot access the devices and services in your network.

Question 2

Firewall Characteristics?

Answer 2

1) firewalls can be hardware or software.
2) They can suit any network or host.
3) They are critical parts of your security.

Question 3

What is DDoS?

Answer 3

Distributed Denial of service.

* Lots of nodes targeting a single website / URL, the goal of which is to make the target become unavailable.

Question 4

What does NSG stand for?

Answer 4

Network Security Group.

Question 5

What is the NSG?

Answer 5

A resource level firewall that can be attached to a virtual network, subnet or network interface.

An NSG determines who can access the resources attached to it, using ingress and egress traffic rules.

Question 6

What are Application Security Groups?

Answer 6

This is an extension of the NSG.

• It focuses on the protection and security of an application rather than an IP endpoint.
• You can group VMs and virtual networks into logical application groups and apply an application security group.

Question 7

What is Azure Security Centre?

Answer 7

It is has been rebranded as Microsoft Defender for cloud

Question 8

Characteristics of Azure Security Centre?

Answer 8

It is an alerting and detection portal in the Azure Portal.

• Agents are deployed on VMs to provide data to the Centre.
• It supports Hybrid setups.
• Attack and Anomaly Detection.
• Policy and Compliance Metrics.
• Security score for your Azure Environment.
• Integrates with other cloud providers.
• Alerts on resources that are not secure

Question 9

How to use the Azure Security Centre?

Answer 9

1. Define policies (Azure can provide some templates).
2. Protect Resources (monitor policies).
3. Respond - Respond to Security alerts, if need be revise/define new policies.

Question 10

What is the Azure Key Vault?

Answer 10

An Azure Keyword and Password management solution.

• It allows you to enable access to applications.
• Azure Keyvault hardware is secure as well.
• Applications are isolated to prevent unnecessary password sharing.
• Support scaling.

Question 11

What is Azure Information Protection?

Answer 11

It enables the securing sharing of data to internal and outside entities.

• works with O365
• Data must be classified (policy or manual)
• It allows you to track activity with regards to sharing.
• You can control who can edit, view or print.
• Integrates with O365, Teams, SharePoint etc.

Question 12

What is Microsoft Defender for Identity?

Answer 12

Users are unreliable and untrustworthy.

• Monitors user and activity in your network.
• Creates baselines for user activity.
• Abnormal activity creates alerts.
• Defender for Identity will suggest security changes to increase security.

Question 13

What is Azure Sentinel?

Answer 13

This is Microsoft’s SIEM Tool.

• data is collected, aggregated, normalised and ingested by Azure.
• Data is analysed anomalies and detections are escalated.
• leverages behavioural Analytics (AI)
• AWS Integration.
• cloud Scale.

Question 14

What are Azure Dedicated Hosts?

Answer 14

Designed to meet dedicated hardware / server requirements.

• There is hardware isolation.
• Only companies run data on the hardware is you.
• Can be expensive.
• makes use of other cloud technology.

Question 15

What does Microsoft Defender for Identity Protect against?

Answer 15

1) Reconnaissance - users searching for other user info.
2) Brute Force - Password guessing attempts.
3) Increased Privs - Attempts from users to gain additional privs.

Question 16

What are the pricing options for Key Vault ?

Answer 16

1) Standard.

2) Premium (includes support for HSM backed keys)