Describe defense in depth
https://pachehra.blogspot.com/
/ arun-pachehra
SC-900: Microsoft Security, Compliance, and Identity Fundamentals: Describe the concepts of security, compliance, and identity
Defense in depth uses a layered approach to security, rather than relying on a single perimeter. A defense in-depth strategy uses a series of mechanisms to slow the advance of an attack. Each layer provides protection so that, if one layer is breached, a subsequent layer will prevent an attacker getting unauthorized access to data.
Example layers of security might include:
Physical security such as limiting access to a datacenter to only authorized personnel.
Identity and access security controls, such as multifactor authentication or condition-based access, to control access to infrastructure and change control.
Perimeter security of your corporate network includes distributed denial of service (DDoS) protection to filter large-scale attacks before they can cause a denial of service for users.
Network security, such as network segmentation and network access controls, to limit communication between resources.
Compute layer security such as securing access to virtual machines either on-premises or in the cloud by closing certain ports.
Application layer security to ensure applications are secure and free of security vulnerabilities.
Data layer security including controls to manage access to business and customer data and encryption to protect data.
Confidentiality, Integrity, Availability (CIA)
As described above, a defense in-depth strategy uses a series of mechanisms to slow the advance of an attack. All the different mechanisms (technologies, processes, and training) are elements of a cybersecurity strategy, whose goals include ensuring confidentiality, integrity, and availability; often referred to as CIA.
Diagram showing the Confidentiality, Integrity, Availability (CIA) triangle.
Confidentiality refers to the need to keep confidential sensitive data such as customer information, passwords, or financial data. You can encrypt data to keep it confidential, but then you also need to keep the encryption keys confidential. Confidentiality is the most visible part of security; we can clearly see need for sensitive data, keys, passwords, and other secrets to be kept confidential.
Integrity refers to keeping data or messages correct. When you send an email message, you want to be sure that the message received is the same as the message you sent. When you store data in a database, you want to be sure that the data you retrieve is the same as the data you stored. Encrypting data keeps it confidential, but you must then be able to decrypt it so that it's the same as before it was encrypted. Integrity is about having confidence that data hasn't been tampered with or altered.
Availability refers to making data available to those who need it, when they need it. It's important to the organization to keep customer data secure, but at the same time it must also be available to employees who deal with customers. While it might be more secure to store the data in an encrypted format, employees need access to decrypted data.
While the goals of a cybersecurity strategy are to preserve the confidentiality, integrity, and availability of systems, networks, applications, and data; it's the goal of cybercriminals to disrupt these goals. Microsoft’s portfolio includes the solutions and technologies to enable organizations to deliver on the goals of the CIA triad.
• Terraform with Azure : Count , length & list
• Terraform with Azure : Workspaces
• Terraform with Azure : Variables & Interpo...
• Terraform with Azure Part-1
• Video
• Video
• AZ-300 Introductory Video
• AZ-300 Configure Diagnostics settings on R...
• AZ-300 Create Action Groups
• AZ-300 Alerts and baseline resources
My name is Arun Pachehra and i am an IT Professional & a fitness enthusiast. Its been more than 16 years working with various technologies and now i am planning to share with you all. As per plan i am going to publish the entire Az 303 series first and if things would go as planned then a lot of stuff would come your way including Q&A , Production issues and various interesting stuff.