Design security solutions for infrastructure — Microsoft Certified: Cybersecurity Architect Expert

Official references for this objective

• Microsoft — Azure security baseline for Key Vault | Microsoft Learn

  Enable the key vault firewall so that the key vault is not accessible by default to any public IPs. Optionally, you can configure specific IP

• Microsoft — Implement Network Security Controls in Azure - Training | Microsoft Learn

  Azure Firewall includes threat-intelligence-based blocking and Secured Virtual Hub deployment for hub-spoke and branch traffic.

• Microsoft — Azure security baseline for Azure DDoS Protection | Microsoft Learn

  Service can be deployed into customer's virtual network False Stores customer content at rest False

• Microsoft — Azure security baseline for Key Vault - Managed HSM | Microsoft Learn

  Azure AD Authentication Required for Data Plane Access Description : Service supports using Azure AD authentication for data plane access.

• Microsoft — Configure and manage threat protection by using Microsoft Defender for Cloud - Training | Microsoft Learn

  Just-in-time machine access min Enable just-in-time access min

• Microsoft — Preparing for SC-100 - Design solutions that align with security best practices and priorities (Part 1 of 4) | Microsoft Learn

  Design security solutions for infrastructure (20-25%)

• Microsoft — Secure your hybrid and multicloud machines by using Azure Arc-enabled servers - Training | Microsoft Learn

  Azure Arc extends the consistent security, observability, and governance of the Azure platform to non-Azure machines.