Microsoft Azure Security Infrastructure (IT Best Practices - Microsoft Press)

Chapter 1 Cloud security Cloud security considerations Compliance Risk management Identity and access management Operational security Endpoint protection Data protection Shared responsibility Cloud computing Distributed responsibility in public cloud computing Assume breach and isolation Azure security architecture Azure design principles Chapter 2 Identity protection in Azure Authentication and authorization Azure hierarchy Role-Based Access Control On-premises integration Azure AD Connect Federation Suspicious activity identification Identity protection User risk policy Sign-in risk policy Notification enabling Vulnerabilities Multi-Factor Authentication Azure Multi-Factor Authentication implementation Azure Multi-Factor Authentication option configuration Chapter 3 Azure network security Anatomy of Azure networking Virtual network infrastructure Network access control Routing tables Remote access (Azure gateway/point-to-site VPN/ RDP/Remote PowerShell/SSH) Cross-premises connectivity Network availability Network logging Public name resolution Network security appliances Reverse proxy Azure Network Security best practices Subnet your networks based on security zones Use Network Security Groups carefully Use site-to-site VPN to connect Azure Virtual Networks Configure host-based firewalls on IaaS virtual machines Configure User Defined Routes to control traffic Require forced tunneling Deploy virtual network security appliances Create perimeter networks for Internet-facing devices Use ExpressRoute Optimize uptime and performance Disable management protocols to virtual machines Enable Azure Security Center Extend your datacenter into Azure Chapter 4 Data and storage security Virtual machine encryption Azure Disk Encryption Storage encryption File share wire encryption Hybrid data encryption Authentication Wire security Data at rest Rights management Database security Azure SQL Firewall SQL Always Encrypted Row-level security Transparent data encryption Cell-level encryption Dynamic data masking Chapter 5 Virtual machine protection with Antimalware Understanding the Antimalware solution Antimalware deployment Antimalware deployment to an existing VM Antimalware deployment to a new VM n