MCA Microsoft Certified Associate Azure Security Engineer Study Guide

Introduction xix
 
Assessment Test xxv
 
Chapter 1 Introduction to Microsoft Azure 1
 
What Is Microsoft Azure? 3
 
Cloud Environment Security Objectives 4
 
Confidentiality 4
 
Integrity 4
 
Availability 5
 
Nonrepudiation 5
 
Common Security Issues 5
 
Principle of Least Privilege 5
 
Zero- Trust Model 6
 
Defense in Depth 6
 
Avoid Security through Obscurity 9
 
The AAAs of Access Management 9
 
Encryption 10
 
End- to- End Encryption 11
 
Symmetric Key Encryption 11
 
Asymmetric Key Encryption 11
 
Network Segmentation 13
 
Basic Network Configuration 13
 
Unsegmented Network Example 14
 
Internal and External Compliance 15
 
Cybersecurity Considerations for the Cloud Environment 16
 
Configuration Management 17
 
Unauthorized Access 17
 
Insecure Interfaces/APIs 17
 
Hijacking of Accounts 17
 
Compliance 18
 
Lack of Visibility 18
 
Accurate Logging 18
 
Cloud Storage 18
 
Vendor Contracts 19
 
Link Sharing 19
 
Major Cybersecurity Threats 19
 
DDoS 19
 
Social Engineering 20
 
Password Attacks 21
 
Malware 21
 
Summary 24
 
Exam Essentials 24
 
Review Questions 26
 
Chapter 2 Managing Identity and Access in Microsoft Azure 29
 
Identity and Access Management 31
 
Identifying Individuals in a System 31
 
Identifying and Assigning Roles in a System and to an Individual 32
 
Assigning Access Levels to Individuals or Groups 33
 
Adding, Removing, and Updating Individuals and Their Roles in a System 33
 
Protecting a System's Sensitive Data and Securing the System 33
 
Enforcing Accountability 34
 
IAM in the Microsoft Azure Platform 34
 
Creating and Managing Azure AD Identities 34
 
Managing Azure AD

ABOUT THE AUTHOR
 
SHIMON BRATHWAITE is Editor-in-Chief of securitymadesimple.org, a website dedicated to teaching business owners how to secure their companies and helping cybersecurity professionals start and advance their careers. He is the author of three cybersecurity books and holds CEH, Security+, and AWS Security specialist certifications.