Plan and implement identity and security

Official references for this objective

• Microsoft — Azure Key Vault VM extension for Windows - Azure Virtual Machines | Microsoft Learn

  A VM with an assigned managed identity .

• Microsoft — Creating and configuring a key vault for Azure Disk Encryption - Azure Virtual Machine Scale Sets | Microsoft Learn

  you must create and use a key vault that's in the same region and tenant as the VMs to be encrypted

• Microsoft — Connect with Microsoft Entra Authentication - Azure SQL Database & SQL Managed Instance & Azure Synapse Analytics | Microsoft Learn

  To connect using MFA, on the Connect to Server dialog box in SSMS select Microsoft Entra MFA . Fill the Server

• Microsoft — Assign Azure RBAC roles or Microsoft Entra roles to the Azure Virtual Desktop service principals - Azure Virtual Desktop | Microsoft Learn

  Azure Virtual Desktop Windows Virtual Desktop 9cdead84-a844-4324-93f2-b2e6bb768d07 Azure Virtual Desktop Client Windows Virtual Desktop Client a85cf173-4192-42f8-81fa-777a763e6e2c

• Microsoft — Azure Key Vault virtual machine extension for Linux - Azure Virtual Machines | Microsoft Learn

  The msiEndpoint property is also required for Azure Arc-enabled VMs . Set msiEndpoint to http://localhost:40342/metadata/identity .

• Microsoft — Configure managed identity in Azure Virtual Desktop - Azure Virtual Desktop | Microsoft Learn

  System-assigned : When you complete the removal, Azure automatically deletes the managed identity and all associated metadata. User-assigned : When you complete the removal, Azure

• Microsoft — Grant access to Azure resources on a Service Fabric cluster - Azure Service Fabric | Microsoft Learn

  Under Role , from the dropdown list, select Storage Blob Data Reader . In the next dropdown list, under Assign access to , choose User

• Microsoft — Network Security Perimeter - Azure SQL Database | Microsoft Learn

  By default, Network Security Perimeter uses Learning Mode , which can be used to log all traffic to and from SQL Database.

• Microsoft — Network security group test - Azure Virtual Machines | Microsoft Learn

  add to the network security group a security rule that allows RDP connections from the remote IP address. This security rule must have a higher

• Microsoft — Require authentication using Microsoft Entra ID | Microsoft Learn

  which should result in a connection error titled ENTRA_AUTH_REQUIRED_BY_SERVER