Az 900 Session 3 Security, privacy, compliance, trust, pricing, SLA and Lifecycles

azureezy.com
https://azureezy.com
© 2020 AzureEzy and AzureTalk. All rights reserved!
AZ-900: Security, privacy, compliance,
trust, pricing, SLA and Lifecycles
1
Session 3

azureezy.com
AzureTalk Core Team
2

azureezy.com
Today’s Session Speaker
Niraj Kumar
AzureTalk Founder
Enterprise Architect, MCT
3
Ram Murti Kumar,
AzureTalk Core Team
Member, Architect, MCT
Vipin Jha
AzureTalk Core Team
Member, Consultant, MCT

azureezy.com
AZ-900: Skills Measured
• Cloud Concepts (15-20%)
• Core Azure Services (30-35%)
• Security, Privacy, Compliance, & Trust (25-30%)
• Azure pricing Service Level Agreements &
Lifecycles (20-25%)
4

azureezy.com
Agenda
5
• Secure Network Connectivity
• Core Identity Services
• Security Tools & Features
• Azure Governance
• Monitoring & Reporting
• Privacy, Compliance & Data Protection Standards
• Planning & Managing Azure costs

azureezy.com
Secure Network Connectivity

azureezy.com
Defense in Depth
7

azureezy.com
Shared Responsibility
8
Reference : Microsoft Docs

azureezy.com
Azure Firewall
9
• Application Rules: Configure
FQDNs that can be accessed
from a subnet.
• Network Rules: Source
addresses, protocols,
destination ports, and
destination addresses

azureezy.com
Distributed Denial of Service (DDoS)
10
Service Tiers
• Basic
• Standard
Standard Protection Mitigate
• Volumetric attacks
• Protocol attacks
• Resource (application) layer
attacks

azureezy.com
Network Security Groups
11
• Multiple inbound/outbound rules
based on Subscription limit
• IP address or range, service tags,
or application security group (ASG)
• TCP, UDP, or Any
• Port or range of ports

azureezy.com
Application Security Groups
12

azureezy.com
Question 1
Which Azure services you can use to filter network
traffic based on FQDN?
a) Azure Firewall
b) Network Security Group
c) Application Security Group
d) None
13
https://q.azureezy.com/1

azureezy.com
Question 1
Which Azure services you can use to filter network
traffic based on FQDN?
a) Azure Firewall
b) Network Security Group
c) Application Security Group
d) None
14

azureezy.com
Azure Core Identity Services

azureezy.com
Authentication and Authorization
16
• Authentication: Process of establishing the
identity of a person or service looking to
access a resource
• Authorization: Process of establishing what
level of access an authenticated person or
service has

azureezy.com
Azure Active Directory
17
• Cloud based identity Provider
• Controls access to azure Internal & External
resources.
• Provides Authentication & Authorization services to
Azure Portal, O365 & other SaaS services
• Single sign-on
• Manage devices using Azure AD
• Invite guest users from other Azure AD (B2B) or Public
IDP (B2C)

azureezy.com
Azure Multi-Factor Authentication
18
• Something you know
• Something you
• Something you are
Comes as part of:
• Azure AD Premium Licenses
• Multi-factor authentication for
Office 365
• Azure AD global administrators

azureezy.com
Security Tools and Features

azureezy.com
Azure Security Center
20
• Monitoring service provides threat protection
• Security recommendations based on your
configurations, resources, and networks
• Monitor security settings across on-premises
& cloud workloads
• Automatically apply required security Policies
• Two tiers : Free & Standard

azureezy.com
Azure Key Vault
21
• Secrets management
• Key management
• Certificate management
• Store secrets backed by
hardware security
modules (HSMs)

azureezy.com
Azure Information Protection (AIP)
22
• Classify & protect documents and
emails by applying labels
• Labels applied automatically (by
administrator)
• Manually (by users)
• Combination of both (where users are
guided by recommendations)

azureezy.com
Azure Advanced Threat Protection
23
• Cloud-based security solution
• Identifies, detects, investigate advanced threats,
compromised identities, and malicious insider
actions
Components
• ATP portal
• ATP Sensor
• Cloud service

azureezy.com
Azure Governance
Methodologies

azureezy.com
Azure Policy
• Allows to create, assign and,
manage policies
• Browse Policy Definitions
• Create Initiative Definitions
• Scope the Initiative Definition
• View Policy evaluation results
25

azureezy.com
Role-Based Access Control (RBAC)
26
Built-in roles
• Owner
• Contributor
• Reader

azureezy.com
Resource Locks
27
• Delete: Read and modify a
resource, but they can't
delete the resource
• ReadOnly: Read a resource,
but they can't delete or
update the resource.

azureezy.com
Azure Blueprints
28
Declarative way to orchestrate
deployment of various resource
templates and other artifacts
• Role assignments
• Policy assignments
• Azure Resource Manager
templates
• Resource groups

azureezy.com
Azure Subscription Governance
29
• Billing
• Access Control
• Subscription Limits

azureezy.com
Monitoring & Reporting

azureezy.com
Resource Tags
31

azureezy.com
Azure Monitor
32
Collects data from
• Application/ Guest OS/Azure
resource/Azure subscription
Diagnostic settings
• Activity Logs
• Metrics

azureezy.com
Azure Service Health
33
Combination of three services
• Azure status- informs service
outages in Azure
• Azure service health - personalized
view of the health of the Azure
services and regions you're using
• Azure resource health- health of
your individual cloud resources

azureezy.com
Monitor Applications & Services
34
Analyze
• Application Insights
• Azure Monitor for containers
• Azure Monitor for VMs
Respond • Alerts
• Autoscale
Visualize
• Dashboards
• Views
• Power BI
Integrate • Azure Monitor with other system

azureezy.com
Question 2
Which tool you can use to protect organization
documents and email?
a) Azure Information Protection
b) Azure Advanced Threat Protection
c) Azure Security center
d) None
35

azureezy.com
Question 2
Which tool you can use to protect organisation
documents and email?
a) Azure Information Protection
b) Azure Advanced Threat Protection
c) Azure Security center
d) None
36

azureezy.com
Privacy, Compliance & Data
Protection Standards
37

azureezy.com
Compliance Terms & Requirements
38

azureezy.com
Microsoft privacy statement
39
• Explains personal data Microsoft
processes
• How Microsoft processes it
• For what purposes
• microsoft.com/privacystatement

azureezy.com
Trust Center
40
Information about
• Security, privacy, compliance offerings, policies,
features, and practices across Microsoft cloud products
• Recommended resources as curated list of the most
applicable and resources for each topic.
• key organizational roles,
• Direct guidance and support
microsoft.com/trustcenter

azureezy.com
Service Trust Portal
41
Companion feature to the Trust Center allows
• Audit reports across Microsoft cloud services
• Help you for Microsoft cloud service features to
manage compliance with various regulations
• Access trust documents protect your data
servicetrust.microsoft.com

azureezy.com
Compliance Manager
42
• Workflow-based risk assessment dashboard within
the Trust Portal
• Track, assign, and verify your organization's
regulatory compliance activities

azureezy.com
Planning & Managing Costs

azureezy.com
Purchase Azure Products & Services
44
Three main customer types
• Enterprise
• Web direct
• Cloud Solution Provider

azureezy.com
Factors Affecting Costs
45
Factors affect Azure costs: Resource type, Services and location
Usage meters tracking usage
• Compute Hours
• IP Address Hours
• Data Transfer In / Out
• Standard Managed Disk /Standard Managed Disk Operations
• Standard IO-Disk/Standard IO-Block Blob Read/Standard IO-Block
Blob Write/Standard IO-Block Blob Delete

azureezy.com
Azure Pricing Calculator
46
https://azure.microsoft.com/en-gb/pricing/calculator/

azureezy.com
Total Cost of Ownership Calculator
47
https://azure.microsoft.com/en-us/pricing/tco/calculator

azureezy.com
Minimizing Costs
48
• Perform cost analyses
• Monitor usage with Azure Advisor
• Use spending limits
• Use Azure Reservations
• Research available cost-saving offers
• Apply tags to identify cost owners

azureezy.com
Azure Cost Management
49
• Reporting
• Data enrichment
• Budgets
• Alerting
• Recommendations
• Price

azureezy.com
Question 3
Which tool you can use to estimate cost of Azure
services?
a) Azure Pricing Calculator
b) Total Cost of Ownership Calculator (TCO)
c) Azure Cost management
d) None
50

azureezy.com
Question 3
Which tool you can use to estimate cost of Azure
services?
a) Azure Pricing Calculator
b) Total Cost of Ownership Calculator (TCO)
c) Azure Cost management
d) None
51

azureezy.com
Break
52

azureezy.com
Demo
1. Create an Azure Policy & Implement resource
tagging with policy
2. Manage access with RBAC
3. Use Azure Pricing Calculator for estimating cost
4. Use Azure TCO Calculator to compare cost with
existing on-prem Infrastructure
5. Access Azure Preview features
6. Explore the Azure Advisor

azureezy.com
Q & A
54

azureezy.com
55
https://bharatguru.in
https://cloudeasy.in
Thanks!https://azureezy.com/az-900
https://t.me/AzureTalk
https://youtube.com/c/AzureTalk
https://www.linkedin.com/in/nirajkum/
https://www.linkedin.com/in/vipinkumarjha/
https://www.linkedin.com/in/rammurti

Az 900 Session 3 Security, privacy, compliance, trust, pricing, SLA and Lifecycles

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Az 900 Session 3 Security, privacy, compliance, trust, pricing, SLA and Lifecycles

Similar to Az 900 Session 3 Security, privacy, compliance, trust, pricing, SLA and Lifecycles (20)

Recently uploaded

Recently uploaded (20)

Az 900 Session 3 Security, privacy, compliance, trust, pricing, SLA and Lifecycles