HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
Suggested Answer:
Box 1: No - Azure Advisor provides you with a consistent, consolidated view of recommendations for all your Azure resources. It integrates with Azure Security Center to bring you security recommendations. You can get security recommendations from the Security tab on the Advisor dashboard. Examples of recommendations include restricting access to virtual machines by configuring Network Security Groups, enabling storage encryption, installing vulnerability assessment solutions. However, Azure Advisor does not provide recommendations on how to improve the security of an Azure AD environment.
Box 2: Yes - Advisor helps you optimize and reduce your overall Azure spend by identifying idle and underutilized resources. You can get cost recommendations from the Cost tab on the Advisor dashboard. Box 3: No. Azure Advisor does not provide recommendations on how to configure network settings on Azure virtual machines. References: https://docs.microsoft.com/en-us/azure/advisor/advisor-security-recommendations https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations
"Advisor is a personalized cloud consultant that helps you follow best practices to optimize your Azure deployments. It analyzes your resource configuration and usage telemetry and then recommends solutions that can help you improve the cost effectiveness, performance, high availability, and security of your Azure resources."
Source https://docs.microsoft.com/en-us/azure/advisor/advisor-overview
It has nothing to do with Active Directory
Azure Advisor Provide a recommendation on MFA and it's a part of Active Directory configuration hence azure advisor provides a recommendation on Azure AD security.
for more detail see the recommendation list on the below URL.
https://docs.microsoft.com/en-us/azure/security-center/security-center-recommendations
Security recommendation does not cover the Active Directory, as it is upto the Customer to provision a user or not through AD.
Similarly Network security, Advisor can recommend to close some ports, but not "HOW to configure"!!
No: Azure Advisor does not provide specific recommendations on how to configure the network settings on Azure VMs. It does provide recommendations for improving network security and performance, but specific network configurations can be highly dependent on your application and workload.
Azure Advisor dashboard displays personalized recommendations for all your subscriptions. The recommendations are divided into five categories:
Reliability: To ensure and improve the continuity of your business-critical applications.
Security: To detect threats and vulnerabilities that might lead to security breaches. To provide insight, Azure Advisor leverage metrics and log data available to the Azure Security Advisor.
Performance: To improve the speed of your applications. Azure Application Insight provides Advisor Performance recommendations in this regard.
Cost: To optimize and reduce your overall Azure spending. Azure Pricing, TCO Calculator, and Azure Cost Management all provide Advisor Cost recommendations.
Operational Excellence: To help achieve process and workflow efficiency, resource manageability and deployment best practices. Azure Advisor Operational Excellence recommendations will be useful for these.
One can apply filters to display recommendations for specific subscriptions and resource types.
So, I would think it is YES for all three scenarios in the question; by enabling different measures/filters, you can use Azure Advisor for all three scenarios.
ChatGPT says Yes, Yes, No. Azure Advisor does provide recommendations on how to improve the security of an Azure Active Directory (Azure AD) environment. Azure Advisor is a cloud-based service that offers best practice recommendations for optimizing your Azure deployments across various aspects, including security. When it comes to Azure AD, Azure Advisor can provide security-related recommendations specific to Azure AD. These recommendations are based on Microsoft's security best practices and are designed to help you enhance the security posture of your Azure AD environment. Some of the security recommendations that Azure Advisor may provide for Azure AD include:
MFA, Configure Conditional Access Policies, enabling Azure AD Security Defaults, Enable Identity Protection, Regularly Review Sign-in Logs and Security Reports.
This is why you shouldn’t just blindly trust chat bots. You have to think critically, was Microsoft advisor designed to provide recommendations for AD, the answer in this context is no, the purpose is broader than that. Stop blindly trusting chat bots, be a human.
Box 1: No
As Azure Advisor provides recommendations for the following services below and AAD isn’t even included, so answer is “NO”.
“Application Gateway, App Services, availability sets, Azure Cache, Azure Data Factory, Azure Database for MySQL, Azure Database for PostgreSQL, Azure Database for MariaDB, Azure ExpressRoute, Azure Cosmos DB, Azure public IP addresses, Azure Synapse Analytics, SQL servers, storage accounts, Traffic Manager profiles, and virtual machines.”
Box 2: Yes -
Advisor helps you optimize and reduce your overall Azure spend by identifying idle and underutilized resources. You can get cost recommendations from the Cost tab on the Advisor dashboard.
Box 3: No.
Azure Advisor does provide recommendation to Azure Virtual machine but doesn’t give recommendation on how to configure network settings on Azure virtual machines.
https://learn.microsoft.com/en-us/azure/advisor/advisor-overview
1 = YES:
Yes, Azure Advisor provides recommendations on how to improve the security of an Azure Active Directory (AD) environment. Azure Advisor is a free service that analyzes your Azure resource configuration and usage and provides recommendations to help improve the performance, security, and cost effectiveness of your Azure resources.
One of the categories that Azure Advisor provides recommendations for is "Security." In this category, it provides recommendations for Azure AD that can help you improve the security of your environment, such as:
Enabling multi-factor authentication (MFA) for all users
Managing user access and permissions
Configuring Azure AD Identity Protection
Enabling Azure AD Conditional Access
Configuring Azure AD Privileged Identity Management
Box1: Yes
Azure Advisor recommendations can include suggestions for improving the security of user access, strengthening password policies, enabling multi-factor authentication, and more. By following these recommendations, you can help to protect your Azure AD environment from potential security threats and vulnerabilities.
Box2:Yes
There's no doubt about it.
Box3:Yes
Azure Advisor recommendations can include suggestions for optimizing network settings such as configuring load balancing, enabling acceleration, and configuring network security groups. By following these recommendations, you can help to improve the performance and security of your Azure virtual machines
Ans 1 is NO
Advisor provides recommendations for Application Gateway, App Services, availability sets, Azure Cache, Azure Data Factory, Azure Database for MySQL, Azure Database for PostgreSQL, Azure Database for MariaDB, Azure ExpressRoute, Azure Cosmos DB, Azure public IP addresses, Azure Synapse Analytics, SQL servers, storage accounts, Traffic Manager profiles, and virtual machines.
Azure Advisor also includes your recommendations from Microsoft Defender for Cloud which may include recommendations for additional resource types.
https://learn.microsoft.com/en-us/azure/advisor/advisor-overview
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
TDAzure
Highly Voted 4 years, 10 months agoNathan12345
1 month, 1 week agosbettani
4 years, 10 months agoPiiri565
4 years, 1 month agorahul10
3 years, 11 months agoMSAzure900
3 years, 9 months agoPiiri565
4 years, 1 month agoRavindraDevkhile
4 years, 2 months agoMoon
Highly Voted 4 years, 10 months agoroanbaga
4 years, 6 months agoe3ddceb
Most Recent 3 months agoPayu1994
6 months, 1 week agoYomzie
6 months, 3 weeks agomsmt
1 year, 3 months agojavito82
1 year, 4 months agoStopblindlytrustingchatbot
1 year, 2 months agoMissLuka
1 year, 6 months agonudiej
1 year, 4 months agonanny123
7 months, 3 weeks agoRaviBanavath
1 year, 7 months agoRohit2023
1 year, 8 months agoGN_AZ900
1 year, 8 months agoThegracie
1 year, 6 months agoLuansi
1 year, 9 months agoPinha
1 year, 9 months agohanzocuk
1 year, 9 months agodolly79
1 year, 10 months agojrop
1 year, 11 months agofemzy
1 year, 10 months agoMahir_khan
2 years ago