Microsoft Azure Fundamentals 07

Activity log : it will store the history

Access control :-

Role based access control (RBAC) :-

1. Owner : He can able to perform all admin tasks + He can also provide access to others
2. Contributor : He can able to perform all admin tasks
3. Reader : only read/view access

Tags :

To organize your resources we can use tags

DDOS Protection ;
Azure DDoS Protection can mitigate the following types of attacks:
● Volumetric attacks: These attacks flood the network layer with a substantial amount of seemingly legitimate traffic. They include UDP floods, amplification floods, and other spoofed-packet floods. DDoS Protection mitigates these potential multi-gigabyte attacks by absorbing and scrubbing them, with Azure's global network scale, automatically.
● Protocol attacks: These attacks render a target inaccessible, by exploiting a weakness in the layer 3 and layer 4 protocol stack. They include SYN flood attacks, reflection attacks, and other protocol attacks. DDoS Protection mitigates these attacks, differentiating between malicious and legitimate traffic, by interacting with the client, and blocking malicious traffic.
● Resource (application) layer attacks: These attacks target web application packets, to disrupt the transmission of data between hosts. They include HTTP protocol violations, SQL injection, cross-site scripting, and other layer 7 attacks. Use a Web Application Firewall, such as the Azure Application Gateway web application firewall, as well as DDoS Protection to provide defense against these attacks. There are also third-party web application firewall offerings available in the Azure Marketplace.
In Azure DDOS offers two plans or SKU :-

1. Basic
2. Standard
DDoS attacks can be targeted at any endpoint that is publicly reachable through the internet.

DNS Server

Locks : -
Delete :
Readonly :
Storage :-