Microsoft Security, Compliance, and Identity Fundamentals: key terms

Flashcards for this exam Microsoft Security, Compliance, and Identity Fundamentals guide

• Active Directory (AD)Microsoft's on-premises directory service for Windows domains, using LDAP, Kerberos, and DNS.Foundational
• AuthenticationVerifying that a user, device, or process is who or what it claims to be.Foundational
• AuthorizationDetermining what an authenticated subject is permitted to access or do.Foundational
• CIA TriadThe three core goals of information security: confidentiality, integrity, and availability.Foundational
• Cloud Access Security Broker (CASB)Security policy enforcement point between users and cloud services that provides visibility, compliance, data security and threat protection.Intermediate
• Conditional AccessMicrosoft Entra ID policy engine that grants, blocks or restricts access based on signals such as user, device, location and risk.Intermediate
• Identity and Access Management (IAM)Policies, processes, and technologies for managing digital identities and controlling their access to resources.Foundational
• Impossible TravelDetection that flags sign-ins from geographically distant locations within a time too short for real travel.Intermediate
• Least PrivilegePrinciple of granting users and processes only the minimum access rights needed to perform their tasks.Foundational
• Microsoft Defender for CloudMicrosoft CNAPP providing cloud security posture management and workload protection for Azure, AWS, Google Cloud and on-premises.Intermediate
• Microsoft Defender XDRMicrosoft's extended detection and response suite, formerly Microsoft 365 Defender, unifying endpoint, identity, email and cloud app protection.Intermediate
• Microsoft Entra IDMicrosoft's cloud identity and access management service, formerly Azure Active Directory (Azure AD).Foundational
• Microsoft Entra ID ProtectionEntra ID feature that detects identity risks such as leaked credentials and risky sign-ins and enforces risk-based policies.Advanced
• Microsoft SentinelMicrosoft's cloud-native SIEM and SOAR solution built on Azure Log Analytics.Intermediate
• Microsoft Service Trust PortalMicrosoft portal providing audit reports, compliance certifications and trust documents for Microsoft cloud services.Foundational
• Multifactor Authentication (MFA)Authentication requiring two or more factors from different categories.Foundational
• Password PolicyRules governing password creation, storage, and use, now guided by NIST SP 800-63B.Foundational
• Passwordless AuthenticationAuthentication methods that remove passwords, using cryptographic keys, biometrics, or possession factors instead.Intermediate
• Privileged Identity Management (PIM)Microsoft Entra ID feature providing just-in-time, time-bound, and approval-based activation of privileged roles.Intermediate
• Role-Based Access Control (RBAC)The Kubernetes authorization mode that grants permissions through Roles/ClusterRoles bound to users, groups, or service accounts.Intermediate
• Security PostureAn organization's overall security status and its ability to prevent, detect, and respond to threats.Foundational
• Sensitivity LabelMicrosoft Purview metadata tag that classifies content and can apply encryption, marking, and DLP policies.Intermediate
• Shared Responsibility ModelFramework dividing security and operational duties between the cloud provider (of the cloud) and customer (in the cloud).Foundational
• Single Sign-On (SSO)Allowing a user to authenticate once and access multiple applications without signing in again.Foundational
• Windows Hello for Business (WHfB)Microsoft passwordless authentication using a TPM-protected key pair unlocked by a PIN or biometric.Intermediate
• Zero Trust Architecture (ZTA)Security model that assumes no implicit trust and continuously verifies every user, device, and request before granting access.Intermediate