AZ 900-Module 4 Latest Version Graded A+

AZ 900-Module 4 Latest Version Graded A+ Azure Security Center monitoring service that provides visibility of your security posture across all of your services, both on Azure and on-premises. The term security posture refers to cybersecurity policies and controls, as well as how well you can predict, prevent, and respond to security threats. Azure Security Center Capabilities -Policy Compliance -Continuous Assessments -Tailored Recommendations -Threat Protection Policy Compliance one of the azure security center capabilities; run policies across management groups, subscriptions, or tenants Continious Assessments one of the azure security center capabilities; assess new and deployed resources to ensure that they are configured properly Tailored Recommendations one of the azure security center capabilities; recommendations based on existing workload with instructions on how to implement them Threat Protection one of the azure security center capabilities; analyze attempted threats through alerts and impacted resource reports Azure Sentinel a security information management (SIEM) and security automated response (SOAR) solution that provides security analytics and threat intelligence across an enterprise; connects and integrates with Office 365, Azure Active Directory, Azure Advanced Threat Protection, and Microsoft Cloud App Security Azure Key Vault stores application secrets in a centralized cloud location in order to securely control; used for Secrets management, key management, certificate management, and storing secrets backed by hardware security modules (HSMs) Azure Dedicated Host provides physical servers that host one or more Azure virtual machines that is dedicated to a single organizations workload; benefits include hardware isolation at the server level, control over maintenance event timing, and aligned with Azure Hybrid Use benefits Azure Firewall a managed, cloud-based, network security service that protects resources in your Azure Virtual Networks. A virtual network is similar to a traditional network that you'd operate in your own datacenter. It's a fundamental building block for your private network that enables virtual machines and other compute resources to securely communicate with each other, the internet, and on-premises networks. Azure DDoS Protection A protection feature within Azure that sanitizes unwanted network traffic before it impacts service availability; basic service tier is automatically enabled in Azure, and standard service tier adds mitigation capabilities that are tuned to protect Azure virtual network resources Standard Service Tier Azure DDoS Protection Helps prevent volumetric attacks (flooding the network layer), protocol attacks (render target inaccessible by exploiting protocol stack weaknesses), and resource (application) layer attacks (target web app packets to disrupt the transmission of data between hosts) Network Security Group (NSG) enables you to