Chapter 4: Azure AD Identity Security
A common attack entry point to Azure environments is by compromising Azure AD identities and credentials. The risk is greater if the compromised identity belongs to a privileged account, which has broader access in the environment. Mitigating identity security risks and configuring secure access is a key objective of the Azure Security Engineer certification exam.
In previous chapters, we covered Azure AD and how to manage its identities. In this chapter, we will explore how to secure those Azure identities using the advanced security features of Azure AD. By the end of this chapter, you will understand how to configure protection against common identity-related attacks in Azure AD.
Here are the topics that we will cover in this chapter with accompanying hands-on exercises:
- Implementing Azure AD Password Protection
- Securing Azure AD users with multi-factor authentication (MFA)
- Implementing Conditional Access policies
- Protecting...
