Data Security and Compliance Flashcards

What is the primary purpose of data encryption in Azure?

Answer: To secure sensitive data at rest and in transit

Data encryption is a fundamental security measure in Azure, designed to protect sensitive information from unauthorized access. It ensures that data is unreadable to anyone without the correct decryption key, whether the data is stored (at rest) or being transmitted across networks (in transit). This protection is crucial for maintaining data confidentiality and compliance.

What is the primary benefit of using Role-Based Access Control (RBAC) in Azure?

Answer: It manages user access to resources based on assigned roles.

Role-Based Access Control (RBAC) in Azure is a system that allows granular management of who has access to Azure resources and what actions they can perform. By assigning specific roles (e.g., Reader, Contributor, Owner) to users, groups, or applications, organizations can enforce the principle of least privilege, enhancing security and operational control. This ensures users only have necessary permissions.

What is Azure Active Directory primarily used for?

Answer: Identity and access management

Azure Active Directory (Azure AD) is Microsoft's cloud-based identity and access management service. It provides a centralized system for managing user identities, authenticating users, and controlling access to cloud applications and resources, both within Azure and for external services. This ensures secure and streamlined access for users and applications.

Which of the following is a primary compliance regulation that organizations must consider when handling data in Azure?

Answer: Health Insurance Portability and Accountability Act (HIPAA)

The Health Insurance Portability and Accountability Act (HIPAA) is a critical U.S. federal law that mandates standards for the protection of sensitive patient health information. Organizations handling healthcare data in Azure must ensure their deployments and processes comply with HIPAA regulations to safeguard patient privacy and security, avoiding legal penalties.

What is the primary function of Data Loss Prevention (DLP) in Azure?

Answer: To prevent the unauthorized sharing of sensitive data

Data Loss Prevention (DLP) in Azure is a set of policies and tools designed to identify, monitor, and protect sensitive information from being accidentally or maliciously shared outside of authorized boundaries. It helps organizations comply with regulations and prevent data breaches by detecting and blocking inappropriate data sharing. This proactive measure safeguards confidential data.