Azure Identity, Authentication, and Authorization Flashcards
(27 cards)
What is the difference between identity, authentication, and authorization in the context of Azure?
Identity is the unique identifier for a digital object (user, application, etc.). Authentication proves that identity is genuine. Authorization defines the specific permissions an identity has.
What service in Azure provides identity, authentication, and authorization features?
Microsoft Entra ID (formerly Azure AD) is the service in Azure that provides identity, authentication, and authorization.
Explain the relationship between an Azure account, an Azure tenant, and Microsoft Entra ID.
Every Azure account has the Entra ID service. An Azure tenant is a dedicated instance of Entra ID that represents an organization in Azure.
What is the core principle behind Zero Trust?
The core principle of Zero Trust is that all users are assumed untrustworthy unless proven otherwise, regardless of their location.
Describe the purpose of Multi-Factor Authentication (MFA) and its components.
MFA provides layered security for user identity by requiring at least two components of something you know, something you have, or something you are.
How do Conditional Access rules enhance security in Azure?
Conditional Access rules are if/then statements that permit or deny access based on specific conditions being met, providing an additional layer of security.
What is the benefit of using passwordless authentication?
Passwordless authentication increases convenience while maintaining security by replacing passwords with alternative, more user-friendly authentication methods.
Explain the difference between business-to-business and business-to-customer external guest access in Entra ID.
Business-to-business access provides a federated level of trust between two different tenants, while business-to-customer access improves integration with customer systems, like applications.
What is the primary purpose of Azure Active Directory Domain Services?
Azure Active Directory Domain Services provides legacy Active Directory features inside of Azure as a managed service, often used for migrating or integrating older applications.
How does Role-Based Access Control (RBAC) help manage access to Azure resources?
RBAC controls access to Azure resources and services based on the role assigned to an identity, ensuring least privilege by granting only necessary permissions.
What is Identity?
A unique identifier for any digital object, such as a user, computer, or application.
What is Authentication?
The process of verifying an identity and proving it is genuine.
What is Authorization?
The process of granting specific permissions to an authenticated identity, determining what actions it can perform.
What is Microsoft Entra ID?
The Azure service that provides identity, authentication, and authorization capabilities. Formerly known as Azure Active Directory (Azure AD).
What is a Tenant?
A dedicated instance of Microsoft Entra ID representing an organization in Azure.
What is a Subscription?
A billing entity in Azure that resources belong to.
What is Zero Trust?
A security principle and framework assuming all users are untrustworthy unless proven otherwise, emphasizing identity validation and least privilege access.
What is Multi-Factor Authentication (MFA)?
A security method requiring users to provide at least two different factors (something they know, something they have, or something they are) to verify their identity.
What is Conditional Access?
An Azure feature that provides an additional layer of security by enforcing policies (if/then statements) based on conditions related to the user, device, location, or application.
What is Passwordless Authentication?
Authentication methods that replace traditional passwords with alternative, more convenient, yet still secure methods.
What is External Guest Access?
Enabling secure access to organizational resources for users outside of the organization’s primary tenant.
What is Business-to-Business (B2B)?
External guest access scenario providing a federated level of trust between different Entra ID tenants.
What is Business-to-Customer (B2C)?
External guest access scenario allowing for improved integration with customer systems or applications.
What is Azure Active Directory Domain Services (Azure AD DS)?
A managed service in Azure providing legacy Active Directory features for compatibility with older applications.
