Separate new-child inheritance from existing Data Lake ACL remediation
Test old and newly created children separately after changing a Data Lake Storage directory's default ACL.
Read the guideDSE security knowledge hubCybersecurity
Cybersecurity
Knowledge
Page 22 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Cybersecurity knowledge center
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
DSE post stream
1,658 articlesCybersecurity
Choose the key identity before creating an encrypted Elastic SAN volume group
Distinguish customer-managed-key setup during volume-group creation from configuration of an existing group.
Read the guide
Include File Sync's paired-region destinations in a GRS firewall review
Review File Sync regional and discovery destinations against the storage redundancy choice.
Read the guide
Review Queue Storage message updates before chaining another work queue
Consider message-state and invisibility updates for multi-step workers, then test interruption and retry behavior explicitly.
Read the guide
Finish Azure Table queries by following continuation tokens
Test completion against continuation state, not merely the number of entities returned in one response.
Read the guide
Include the attestation endpoint in Trusted Launch integrity-monitoring checks
What should be checked when a Trusted Launch VM's Guest Attestation extension fails behind network controls?
Read the guide
Check VM watch's selected authentication method before rotating an Event Hubs credential
Why might changing an Event Hubs connection string not change the authentication VM watch actually uses?
Read the guide
Authorize the customer's local application identity for cross-tenant disk keys
Which identity must receive access when an Azure disk encryption set uses a key in another tenant?
Read the guide
Choose the disk encryption set's type before enabling double encryption
Can an existing disk encryption set be repurposed for a different encryption type?
Read the checklist
Account for existing scale-set instances when enabling encryption at host
Does enabling encryption at host on a scale set immediately encrypt every existing instance?
Read the checklist