• What is Transparent Data Encryption (TDE) in Azure SQL Database ?

  • How doesAzure encrypt data at rest? Explain concepts likeStorage Service Encryption (SSE)andAzure Disk Encryption (ADE).

  • Describe the function of a Web Application Firewall (WAF). Which Azure services provide WAF capabilities (e.g., Application Gateway, Front Door)?

  • What is Azure Bastion , and how does it provide secure administrative access to Azure Virtual Machines ?

  • Explain Azure Private Link . How does it enhance the security of accessing Azure PaaS services (like Azure SQL , Storage Accounts ) from a VNet ?

  • What is Azure DDoS Protection, and what types of attacks does it help mitigate? Explain the difference between the Basic and Standard tiers.

  • Describe Azure Firewall . When would you use Azure Firewall instead of or in addition to NSGs ?

  • What are Network Security Groups (NSGs) and Application Security Groups (ASGs)? How do they work together to control network traffic flow within an Azure Virtual Network (VNet)?

  • Explain the purpose of Azure Key Vault . What types of sensitive information should be stored there, and how do you control access to it?

  • What are Managed Identities in Azure? How can an ASP.NET Core application use a Managed Identity to securely access Azure Key Vault or Azure SQL Database without storing credentials?

  • Describe Role-Based Access Control (RBAC) in Azure. How do you use built-in roles , and when would you create custom roles ?

  • What is the Shared Responsibility Model in Azure, and how does it apply to securing PaaS services like Azure App Service versus IaaS services like Azure Virtual Machines ?