Microsoft Certified: Azure Administrator Associate

You are always responsible for: - Answer- 1 Data 2 Endpoints 3 Accounts 4 Access Azure Security Center tiers: - Answer- Free Standard - $15 a month per node Authentication (AuthN) - Answer- Process of establishing identity of a person or service. Includes act of challenging party for their creds. Establishes they ARE who they say they are. Authorization (AuthZ) - Answer- Establishes what access you are allowed Azure MFA for global admins is: - Answer- Free Azure MFA for non-global admins is: - Answer- Not free. Requires specific license Identity - Answer- A thing that can be authenticated: Users, Servers, Services, Apps Principle - Answer- An identity with certain roles: Sudo or CMD as an admin. Role changes even with identity staying the same. Groups are another example or principles Service Principle - Answer- Identity used by a service or application. Can be assigned roles. Role-Based Access Control (RBAC) - Answer- Roles are sets of permissions, users are assigned to roles; users are assigned to groups and the group are assigned to roles. Like editor or read only. Can be granted to access an Azure service instance Privileged Identity Management (PIM) - Answer- A paid for service that provides oversight of role assignments, self-service and just in time role activation Symmetric encryption - Answer- Uses a single key to encrypt and decrypt data. Asymmetric encryption - Answer- Two keys are used; one key encodes the message, and the other key decodes the message. Used for Transport Layer Security (TLS) which is used for HTTPS and data signing Azure Storage Service Encryption - Answer- Data at rest encryption. Used for Blob storage, Azure files, etc