Azure Sentinel – Gaining the Azure Data Engineer Associate Certification
For those responsible for implementing a security solution, Azure Sentinel is the place to start, and it’s helpful to become an expert at it. This product is an industry‐leading security information event management (SIEM) and security orchestration automated response (SOAR) solution. In addition to data collections and analysis capabilities, Azure Sentinel has threat intelligence, detection, and hunting features. Founded on a collecting, detecting, investigating, and responding philosophy, Azure Sentinel protects not only all your cloud resources, but your on‐premises, private resources as well.
Microsoft Defender for Cloud
Microsoft Defender for Cloud consists of two features: Azure Security Center and Azure Defender. Azure Security Center is focused on making sure your provisioned resources are in compliance with necessary regulatory standards. In addition, Azure Security Center will check to make sure all your resources follow cybersecurity industry best practice guidelines. While Azure Sentinel collects logs to detect threats, then responds to them, Azure Security Center uses checklists and industry guidelines to help enforce compliance.
Azure Defender monitors Azure VMs, SQL databases, web application, network, containers, and so forth. If a threat is found, an alert is sent to an administrator for action. Like Azure Security Center, Azure Defender can be used in a hybrid cloud scenario. This means you can monitor your on‐premises resources running in your private network. These enhanced security features are also referred to under the new name of Microsoft Defender for Storage.
Azure Information Protection
If you want to have a chance at privacy and governance, the first step is to identify what assets you have that need protection, then what level of sensitivity those assets require—for example, public, internal, confidential, and highly confidential. That is not always an easy task. Azure Information Protection (AIP) can help you identify assets you may not know exist, and once classified, can help you enforce access policies and compliance.
Azure Sphere
This is a secure platform where devices can connect to via the Internet. When a device connects, it can be monitored, remotely maintained, controlled, and updated by an administrator. A scenario might be one in the IoT context where you want an isolated secure connection point for the devices and a means to manage and monitor them.
For those responsible for implementing a security solution, Azure Sentinel is the place to start, and it’s helpful to become an expert at it. This product is an industry‐leading security information event management (SIEM) and security orchestration automated response (SOAR) solution. In addition to data collections and analysis capabilities, Azure Sentinel has threat intelligence, detection,…
