Please enable JavaScript.

Coggle requires JavaScript to display documents.

Azure Fundamentals (Security (Azure Security Center (Uses (Incident…

- - - - provides inbound protection for non-HTTP/S protocols.
        
        Examples of non-HTTP/S protocols include: Remote Desktop Protocol (RDP), Secure Shell (SSH), and File Transfer Protocol (FTP).
      - provides outbound, network-level protection for all ports and protocols, and application-level protection for outbound HTTP/S.
  - - - protects your Azure applications by scrubbing traffic at the Azure network edge before it can impact your service's availability.
        
        Within a few minutes of attack detection, you are notified using Azure Monitor metrics.
  - - - are fully customizable, and give you the ability to fully lock down network communication to and from your virtual machines.
        
        you can isolate applications between environments, tiers, and services.
  - - - involves the act of challenging a party for legitimate credentials, and provides the basis for creating a security principal for identity and access control use.
        
        It establishes if they are who they say they are.
  - - - It specifies what data they're allowed to access and what they can do with it.
  - - - built in support for synchronizing with your existing on-premises Active Directory or can be used stand-alone.
        
        can share the same credentials for all apps
        
        can control access to internal and external data and applications using centralized rules and policies configured in Azure AD
        
        Uses
        
        • Authentication
        
        • Single Sign-On (SSO)
        
        • Application Management
        
        • Business to Business (B2B) Identity Services
        
        • Device Management
  - - - Something you know
      - Something you possess
      - Something you are
  - - - Available in two tiers
        
        Free
        
        limited to assessments and recommendations only
        
        Standard
        
        full suite of security-related services including continious monitoring, threat detection and just-in-time access control
    - - Incident Response
        
        Detect, Assess, Diagnose
      - Implement Recommendations
  - - - helps you control your applications' secrets by keeping them in a single central location and providing secure access, permissions control, and access logging.
  - - - Analyse data flows, detect risky behavior, track access to documents, prevent data leakage or misuse of confidential information.
  - - - Azure ATP is capable of detecting known malicious attacks and techniques, security issues, and risks against your network.
  - - - These policies apply and enforce rules that your resources need to follow.
        
        These policies can enforce these rules when resources are created, and can be evaluated against existing resources to give visibility into compliance.
  - - - An initiative definition is a set or group of policy definitions to help track your compliance state for a larger goal
  - - - considered a core service and is included with all subscription levels at no cost.
  - - - Delete
        
        will allow all operations against the resource but block the ability to delete it.
      - Read-only
        
        will only allow read activities to be performed against it, blocking any modification or deletion of the resource.
  - - - It helps you understand how your applications are performing and proactively identifies issues affecting them and the resources they depend on.
  - - - It can notify you, help you understand the impact of issues, and keep you updated as the issue is resolved.
        
        can also help you prepare for planned maintenance and changes that could affect the availability of your resources.
- - - - Update Domain
        
        When a maintenance event occurs, the update is sequenced through update domains.
      - Fault Domain
        
        Fault domains provide for the physical separation of a workload across different hardware in the datacenter.
- - - - Free
        
        An Azure free subscription includes a $200 credit to spend on any service for the first 30 days, free access to the most popular Azure products for 12 months, and access to more than 25 products that are always free.
      - PAYG
        
        charges you monthly for the services you used in that billing period.
      - Enterprise Agreement
        
        provides flexibility to buy cloud services and software licenses under one agreement, with discounts for new licenses and Software Assurance. It's targeted at enterprise-scale organizations.
      - Student
        
        includes $100 in Azure credits to be used within the first 12 months plus select free services without requiring a credit card at sign-up.
        
        You must verify your student status through your organizational email address.
      - Every Azure Subscription Includes
        
        Free access to billing and subscription support
        
        Azure products and services documentation
        
        Online self-help documentation
        
        Community support forums
- - - - Zones
        
        A Zone is a geographical grouping of Azure Regions for billing purposes.
        
        • Zone 1 (United States, Europe, Canada, UK, France)
        
        • Zone 2 (Asia Pacific, Japan, Australia, India, Korea)
        
        • Zone 3 (Brazil)
        
        • DE Zone 1 (Germany)