Security and Compliance
This domain covers Azure's identity, security tooling, and how Microsoft helps customers meet compliance obligations. Focus on Microsoft Entra ID, defense in depth, and governance of trust.
Identity with Microsoft Entra ID
Microsoft Entra ID (formerly Azure Active Directory) is Azure's cloud identity and access service, providing authentication and authorization. Multifactor authentication adds a second verification factor, and Conditional Access enforces policies based on signals like user, location, and device. Single sign-on lets users access many apps with one identity.
Defense in depth and Zero Trust
Defense in depth layers protections across identity, perimeter, network, compute, application, and data so no single failure is catastrophic. The Zero Trust model assumes breach and verifies every request explicitly, granting least-privilege access. Microsoft Defender for Cloud assesses posture and protects workloads.
Protecting the network
Network security groups filter traffic to subnets and interfaces, Azure Firewall provides centralized, stateful filtering, and DDoS Protection defends against volumetric attacks. Combining these controls limits exposure and contains threats.
Compliance and trust
Microsoft publishes audit reports and certifications through the Service Trust Portal, and the Microsoft Purview compliance tools help manage data. Azure Policy and role-based access control help customers demonstrate compliance for their own configurations.