Security, Compliance, Privacy, and Trust

This chapter describes Azure services and resources that enable a person to apply various security methods to protect network traffic between Azure and his/her services and users. Topics covered in the chapter include Azure Firewall, network security groups, application security groups, user‐defined routes, and Azure distributed denial‐of‐service protection. Azure includes several services to enable him/her to employ strong security within his/her Azure environment. These include Security Center, Key Vault, Azure Information Protection, and Advanced Threat Protection. The chapter explores the security services and features that are covered by the AZ‐900 exam. It also introduces several governance topics covered in the exam, including initiatives and policies, controlling access with role‐based access control, locking resources, and using Azure Advisor and Azure Blueprints. Azure also offers tools for ensuring adherence to compliance and data protection standards through Trust Center, Service Trust Portal, and Compliance Manager.