You manage an azure subscription named sub1. sub1 is associated to an azure acitve direcory tenant named contoso.com  You need to find error messages indicating that a user session is invalid because of a password expiration or a recent password change which log should you review sign-in log audit log risky sihn ins log users flagged for risk log

What controls do you think could be implemented to protect a system from users keeping covert data on the system using ADS? Submit at least 2 or 3 specific solutions  What controls would you implement to protect you system from users keeping covert data on the system using ADS?

which monitoring tool allows audit trail logs to be analyzed in the near real time?

Based upon your readings this week, explain what each of the following terms mean and how they can be prevented.  This will aid you in preparing for the quiz on this material.  Topics: Buffer Overflow Injections (SQL, HTML, Command, Code) Authentication Credential brute force Session hijacking Redirect Default credentials Weak credentials Kerberos exploits Authorization Parameter pollution Insecure direct object reference Cross-site scripting (XSS) Stored/persistent Reflected DOM Cross-site request forgery (CSRF/XSRF) Clickjacking Security misconfiguration Directory traversal Cookie manipulationLinks to an external site. File inclusion Local Remote Unsecure code practices Comments in source code Lack of error handling Overly verbose error handling Hard-coded credentials Race conditions Unauthorized use of functions/unprotected APIs Hidden elements (sensitive info in the DOM) Lack of code signing

A program called Isu gives access to role accounts. The user's access rights are checked, and the user is required to enter her password. If access rules allow the change and the user's password is correct, Isu allows the change. Given that Mary uses Isu from her account, why does isu require her to enter her password? Name the principles involved, and why they require this.

Quèstion 15 mitigating many security issues can be achieved by limiting the privileges on systems to the minimum level needed by users to perform their required tasks True False » A Moving to another question will save this response. « »