Microsoft · SC-900
Core infrastructure security in Azure
SC-900 · Lesson 7 of 15 · 51:00
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SC-900 exam (Microsoft Security, Compliance, and Identity Fundamentals). In this lesson: Azure DDoS Protection (Network Protection and IP Protection), the web application firewall (OWASP rules, Application Gateway, Front Door), Azure Firewall (Basic, Standard, Premium, Firewall Manager), network segmentation with virtual networks, subnets and peering, network security groups and rule priority, Azure Bastion and its tiers, and Azure Key Vault (secrets, keys, certificates, Standard and Premium). Includes three original practice questions.
Preview the topics
- A web shop is hit by a flood of HTTP requests that look like normal page loads, and by attempts at SQL injection in its search box. Which service addresses both?
- An NSG has two inbound rules: priority 100 denies port 3389 from anywhere, and priority 200 allows port 3389 from the office. What happens to a remote desktop connection from the office?
- A bank must keep the encryption keys for its databases in tamper-resistant hardware, and stop developers from storing connection strings in code. What should it use?