Defense in depth and Microsoft Defender for Cloud

2 min read Quiz included

Defence in depth

Defence in depth protects information with multiple layers of security. If an attacker gets through one layer, the next one still stands in the way. Picture the layers as rings around your data, from outside in:

Layer	What it protects	Example
1. Physical security	the buildings and hardware	data centre guards and access controls (Microsoft's job)
2. Identity and access	who can get in	Microsoft Entra ID, MFA, Conditional Access
3. Perimeter	the network edge	DDoS protection, perimeter firewalls
4. Network	traffic between resources	network security groups, segmentation
5. Compute	virtual machines and their OS	patching, endpoint protection, closing unused ports
6. Application	your code	secure development, secrets kept out of code
7. Data	the data itself	encryption, access control

The data is at the centre because it is what attackers are really after.

Each layer is a barrier; an attacker who gets through one still meets the next. The data sits in the middle because it is what attackers want.

Microsoft Defender for Cloud

Microsoft Defender for Cloud is a monitoring tool for security posture management and threat protection. It watches your environment, tells you what is wrong, and helps you fix it.

It works across:

Azure: many Azure services are protected natively, without deploying anything extra,
on-premises machines (through Azure Arc),
other clouds (it can connect to AWS and Google Cloud accounts).

What it gives you:

Secure score: a single number for your security posture, with recommendations ranked by how much each would improve it.
Continuous assessment: finds misconfigurations and vulnerabilities as they appear.
Recommendations to harden your resources, often with a one-click fix.
Threat protection and alerts for workloads such as servers, containers, databases and storage.
Regulatory compliance dashboards against standards.

Its job can be summarised as: assess, secure and defend. Its two halves have names you may meet:

Cloud security posture management (CSPM): finding weaknesses and misconfigurations. The foundational CSPM features, including secure score, are free.
Cloud workload protection: paid Defender plans that detect and respond to threats on specific workloads, such as Defender for Servers, Defender for Storage, Defender for SQL and Defender for Containers.

Finished this lesson?Mark it complete to earn +20 XP and move your progress on.