You're reading from Microsoft Security, Compliance, and Identity Fundamentals Exam Ref SC-900

Product type Book

Published in May 2022

Publisher Packt

ISBN-13 9781801815994

Pages 404 pages

Edition 1st Edition

Languages

Concepts

Cloud Security

Author (1):

Dwayne Natwick

Table of Contents (24) Chapters

Preface

1. Section 1: Exam Overview

2. Chapter 1: Preparing for Your Microsoft Exam

3. Section 2: The Key Concepts of Security, Compliance, and Identity

4. Chapter 2: Describing Security Methodologies

5. Chapter 3: Understanding Key Security Concepts

6. Chapter 4: Key Microsoft Security and Compliance Principles

7. Section 3: The Microsoft Identity Management Solutions

8. Chapter 5: Defining Identity Principles/Concepts and the Identity Services within Azure AD

9. Chapter 6: Describing the Authentication and Access Management Capabilities of Azure AD

10. Chapter 7: Describing the Identity Protection and Governance Capabilities of Azure AD

11. Section 4: The Microsoft Security Solutions for Microsoft 365 and Azure

12. Chapter 8: Describing Basic Security Services and Management Capabilities in Azure

13. Chapter 9: Describing Security Management and Capabilities of Azure

14. Chapter 10: Describing Threat Protection with Microsoft 365 Defender

15. Chapter 11: Describing the Security Capabilities of Microsoft Sentinel

16. Chapter 12: Describing Security Management and the Endpoint Security Capabilities of Microsoft 365

17. Section 5: The Microsoft Compliance Monitoring Capabilities within Microsoft 365 and Azure

18. Chapter 13: Compliance Management Capabilities in Microsoft

19. Chapter 14: Describing Information Protection and Governance Capabilities of Microsoft 365

20. Chapter 15: Describing Insider Risk, eDiscovery, and Audit Capabilities in Microsoft 365

21. Chapter 16: Describing Resource Governance Capabilities in Azure

22. Chapter 17: Final Assessment/ Mock Exam

23. Other Books You May Enjoy

Describe Azure Firewall and Web Application Firewall

The solutions that will be discussed in this section can be thought of as protecting at multiple layers of the Defense in Depth strategy. Azure Firewall has security capabilities that can be viewed on both the perimeter and network security layers. In addition to these layers, Web Application Firewall can also be viewed as a security solution at the application layer.

Let's discuss the Azure Firewall solution and how it is used.

Describe Azure Firewall

Azure Firewall is a stateful firewall as a service within Azure. Azure Firewall provides a highly available and unrestricted scalable firewall solution. Figure 8.22 shows the architecture of Azure Firewall in an Azure network. Azure Firewall is placed in a separate subnet to isolate traffic from resources on other subnets. Firewalls provide packet inspection for malicious activity as well as inbound and outbound rules, similar to an NSG. The difference between the rules...