SC-900 decision sheets

• Azure Firewall Basic vs Standard vs Premium, Firewall Manager, and DDoS tiers
• Sensitivity label vs retention label vs DLP vs sensitive information type
• Compliance Manager: score vs assessment vs template vs control responsibility
• Virtual network vs peering vs service endpoint
• Defender for Cloud: CSPM vs CWPP vs DevSecOps
• Security benchmark vs regulatory compliance standard vs custom standard
• Choosing the Defender for Cloud workload protection plan
• Which Microsoft Defender XDR product protects which workload
• Entra authentication methods: primary, MFA, SSPR, and phishing-resistant
• Microsoft Entra roles vs Azure roles, built-in vs custom
• Foundational CSPM vs Defender CSPM
• Entitlement management vs PIM vs access reviews vs ID Protection vs ID Governance
• System-assigned vs user-assigned managed identity
• Defender for Cloud vs Sentinel vs Entra ID vs Purview
• Azure Firewall vs Web Application Firewall vs DDoS Protection vs Bastion vs NSG
• PIM assignments: eligible vs active, time-bound vs permanent
• Which Microsoft Purview solution: Compliance Manager vs DLP vs Insider Risk vs eDiscovery vs Audit
• Retention policy vs retention label vs regulatory record vs eDiscovery hold
• Sentinel analytics rule types: scheduled vs NRT vs Microsoft security vs anomaly vs Fusion
• Microsoft Sentinel: connect vs detect vs visualise vs respond vs hunt
• The three Zero Trust principles