SC-900 decision sheets

• Which Microsoft Defender XDR product protects which workload
• Foundational CSPM vs Defender CSPM
• System-assigned vs user-assigned managed identity
• Azure Firewall vs Web Application Firewall vs DDoS Protection vs Bastion vs NSG
• PIM assignments: eligible vs active, time-bound vs permanent