Exam Ref AZ-500 Microsoft Azure Security Technologies

Chapter 1

Manage identity and access

An important step when securing workloads is determining what traffic you’ll allow and what traffic you’ll block. In the past, you might use the network location and traffic type to make this determination. For example, you might allow traffic that came from a particular IP address and on a particular port and deny that traffic if it didn’t meet those specific conditions. Over time, clever attackers have learned to spoof IP address information, allowing them to bypass these traditional barriers. Today, you will hear security practitioners utter the aphorism, “identity is the new control plane.” This means when the network location or traffic properties are not a great signifier of whether a host or traffic ...