Security pillar principles in Azure - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the main goal of the Security pillar in cloud architecture?

To protect data, systems, and assets by implementing strong controls and managing risks effectively.

beginner

Name one key practice for managing identity and access in the Security pillar.

Use strong authentication methods like multi-factor authentication (MFA) and least privilege access.

beginner

Why is encryption important in the Security pillar?

Encryption protects data by making it unreadable to unauthorized users, both when stored and during transmission.

intermediate

What does the principle of 'defense in depth' mean in cloud security?

It means using multiple layers of security controls to protect resources, so if one layer fails, others still protect the system.

intermediate

How does continuous monitoring support the Security pillar?

It helps detect and respond to security threats quickly by constantly checking system activity and alerts.

Which of the following is a best practice for identity management in the Security pillar?

A Granting all users admin access by default

B Disabling logging to improve performance

C Using multi-factor authentication

D Sharing passwords among team members

Multi-factor authentication adds an extra layer of security by requiring more than one form of verification.

What is the purpose of encrypting data in the cloud?

A To make data load faster

B To prevent unauthorized reading of data

C To reduce storage costs

D To allow anyone to access data easily

Encryption ensures that only authorized users can read the data by converting it into a secure format.

What does 'least privilege' mean in access control?

A Access is granted permanently without review

B Users get full access to all resources

C Users share access credentials

D Users get access only to what they need

Least privilege means giving users only the permissions they need to do their job, reducing risk.

Which security approach uses multiple layers to protect cloud resources?

A Defense in depth

B Open access

C Single sign-on

D No monitoring

Defense in depth uses several security layers so if one fails, others still protect the system.

Why is continuous monitoring important in cloud security?

A To detect and respond to threats quickly

B To ignore security alerts

C To disable firewalls

D To increase system downtime

Continuous monitoring helps spot security issues early and respond before damage occurs.

Explain the key principles of the Security pillar in cloud architecture.

Think about how to keep cloud resources safe from unauthorized access and threats.

Describe how 'least privilege' and 'multi-factor authentication' improve cloud security.

Consider how controlling who can do what and verifying identity helps protect resources.