Explain OS-only agentless findings before counting Azure data disks as covered
Why can Defender for Cloud report an Azure VM's operating-system disk while leaving its data disks outside agentless coverage?
Read the explainerDSE security knowledge hubNetworks & Infrastructure
Networks & Infrastructure
Knowledge
Page 10 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Explore this topic
Start with the cornerstone guide Networks & Infrastructure knowledge center
Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.
DSE post stream
1,200 articlesNetworks & Infrastructure
Plan maintenance suppression without expecting delayed alert notifications
What remains visible, and what will not be replayed, when an alert processing rule suppresses action groups?
Read the guide
Qualify predictive scale-out without removing reactive autoscale
Which workload and control conditions must hold before enabling predictive autoscale for a scale set?
Read the guide
Allow for cross-tenant identity propagation in managed-application deployment
Treat identity creation and its availability for role assignment as separate steps in the documented preview flow.
Read the guide
Prepare the App Service custom-domain binding before regional cutover
Separate target-app preparation from the later DNS change that directs users to it.
Read the guide
Preserve URI-based deployment for ARM pipeline templates using relativePath
Why can switching an ARM pipeline task to a local template break a linked template's relativePath?
Read the guide
Look in Activity Log when SKU validation leaves no deployment history
A template can fail SKU validation before a deployment starts, leaving evidence outside the deployment-history view.
Read the guide
Do not treat a polled ExpressRoute route-count alert as a deployment gate
Route additions can outrun the custom alert workflow, and collection runtime must be considered when setting its recurrence.
Read the guide
Do not treat Azure Firewall's DNS server list as an ordered fallback chain
Review random upstream selection and the absence of an extra fallback when every configured DNS server is unavailable.
Read the guide
Count hot destination pairs when reviewing Load Balancer SNAT pressure
For TCP, the destination address and port determine whether a translated source port can be reused by another active connection.
Read the guide