Microsoft · AZ-900
RBAC, Zero Trust, defense in depth, Defender for Cloud
AZ-900 · Lesson 11 of 15 · 1:20:02
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the AZ-900 exam (Microsoft Azure Fundamentals). In this lesson: Azure role-based access control (security principal, role and scope; Owner, Contributor, Reader, User Access Administrator; inheritance; Azure roles versus Microsoft Entra roles), the three Zero Trust principles, the seven layers of defense in depth, and Microsoft Defender for Cloud (posture, recommendations, secure score, free and paid plans, multicloud). Includes three original practice questions.
Preview the topics
- A developer must create and delete resources in one resource group, but must not be able to give anyone else access. Which assignment fits best?
- A company wants to filter a massive flood of traffic before it takes its public website down. Which layer of defense in depth does that belong to?
- A company has no budget for security tools yet. What does Defender for Cloud still give it, for free?