Identity, access, and security
Microsoft Entra ID, authentication, authorization, RBAC, and Zero Trust ideas for AZ-900.
Learning objectives
Work through each idea below. Use Listen to hear the explanation — pick a voice next to Listen anytime (Sophia is the default).
- Microsoft Entra ID
- Authentication vs authorization
- RBAC
- MFA and Conditional Access strengthen sign-in security based on risk and context.
- Defense in depth
- Zero Trust
Microsoft Entra ID
Speed
cloud identity directory for users, groups, and app registrations.
Authentication vs authorization
Speed
prove identity vs grant permissions.
RBAC
Speed
assign roles at a scope to enforce least privilege on Azure resources.
MFA and Conditional Access strengthen sign-in security based on risk and context.
Speed
MFA and Conditional Access strengthen sign-in security based on risk and context.
Defense in depth
Speed
layered controls across identity, network, compute, and data.
Zero Trust
Speed
never trust by default; verify explicitly and assume breach.