Zero trust, defense in depth, Defender, Policy, Purview, SLAs, TCO calculator and cost management.
40 cards · basic cards · AI-written, checked twice. Edit anything.
- What does zero trust security mean?
Show answer
Verify every access attempt, assume breach mentality, grant only necessary permissions, and continuously validate identity and device health- What is the core principle of zero trust?
Show answer
Least privilege: grant only the minimum permissions needed to complete a specific task- What does 'assume breach' mean in zero trust?
Show answer
Treat the network as potentially compromised; verify all access continuously rather than trusting once at login- How does zero trust verify identity?
Show answer
Multi-factor authentication (MFA) combined with device health checks and user context analysis- How does zero trust handle network segmentation?
Show answer
Divide networks into zones with strict boundaries; limit lateral movement even between internal segments- What is the goal of defense in depth?
Show answer
Layer multiple security controls so a breach at one level does not compromise the entire system- Name four layers in a defense in depth strategy
Show answer
Firewall, network segmentation, access controls, data encryption, and threat detection- What assumption does defense in depth make about single protections?
Show answer
No single security control is sufficient; multiple overlapping controls are essential- What is Azure Defender?
Show answer
Cloud-native threat protection service offering integrated security monitoring across Azure services and on-premises resources- Which Azure resource types does Defender protect?
Show answer
Virtual machines, SQL databases, App Service, Storage accounts, Key Vault, and Kubernetes clusters- What do Azure Defender alerts indicate?
Show answer
Suspicious behavior, identified vulnerabilities, malware detections, or active security threats- How does Azure Defender identify threats?
Show answer
Uses Microsoft threat intelligence from billions of devices and security research to detect patterns and indicators- How is Azure Defender priced?
Show answer
Per-resource per month; you pay only for resources where Defender is enabled- What is Azure Policy?
Show answer
Service that defines, assigns, and enforces organizational standards and compliance requirements across Azure resources- How does the Deny effect in Azure Policy work?
Show answer
Blocks creation or modification of resources that do not comply with the policy definition
FlashKeepers