Understand Security, Privacy, Compliance, & Trust Flashcards
What is a Network Security Group (NSG)?
NSG is a regulatory mechanism that controls the communication amongs the N-tier loosely coupled architecture from low tier to high tier.
The Network Security Group feature is important because it only allows trusted communication between your different data layers.
What is the Application Security Group (ASG)? **
Application Security Group provides protection by giving recommendations on a free tier, standard tier, and gives full-on monitoring service.
Detect Phase
Assess Phase
Diagnose Phase- containment strategy
What is the Azure firewall?
Azure firewall protects the perimeter of the virtual network; cloud-based network security that establishes IP address boundaries & protects VN from the perimeter.
What is Azure DDoS Protection?
DDoS are full-blown attacks on virtual machines that tries to overload load balancers with requests.
- Basic DDoS Protection
- Advanced DDoS protection
What is authentication?
Authentication is the process where the cloud provider gives an employee an identity in the organization.
What is authorization?
Authorization is when the employer gives the employee authorization or access to a set of resources.
What is Azure Active Directory (AD)?
AD is an “active directory” of already given prior authentication lists for people and it can sync with your already- made active directory for authentications and authorizations.
- Azure AD gives:
- MF Authentication
- SSO (multiple environments)
- Application Management
- B2B Identity services
- Device Management
What is SSO?
SSO also called Single-Sign-On is part of the Azure Active Directory.
- This decreases problems for Help Desk which gives more control to help desk by allowing a single password and username for multiple sign-in for different resources.
What is Azure Multi-Factor Authentication?
MFA is part of the Azure Directory list of resources:
- It gives authentication by the provider- so multi-factor authentication can be created:
3 questions asked here:
- Something you know?
- Something you possess?
- Something you possess?
(pin code, thumbprint, mothers maiden name)
What is Azure Security Center?
Azure security center is similar to the applications security group
- give DAD assessment
- give recommendations on security measures
What is Azure Key Vault?
Azure Key Vault is a specialized application to store secrets via centralized cloud services.
Functions of Azure Key Vault:
- Secrets Management
- Key Management
- Certification Management
- Has hardware security modules
What is Azure Information Protection?
AIP or Azure Information Protection helps organizations classify & optionally protect documents & emails by applying labels
- Ex: word documents (you label as: all employees, confidential employees- X,Y,Z)
What is Azure Advanced Threat Protection?
Advanced Threat Protection (ATP) is cloud based security solution that identifies, detects, and helps you investigate ADVANCED THREATS.
What is Azure Policy?
Policies created to ensure IT measures are met including:
- SLA met for customers
- allows for cost management
- keeps your corporate standards in place on a smaller level than higher level
What is Role-Based-Access- Control (RBAC)?
Role Based Access Control (RBAC) is what it sounds like. It gives authorization to a specific authenticated identity to have access to resource groups/ resources.
- Also allowed through Azure Active Directory (AD)
