Explanation:
Box 1: Document fingerprinting
Identifies Office documents that contain customer addresses and phone numbers sourced from DB1 Document fingerprinting is a Microsoft Purview feature that takes a standard form that you provide and creates a sensitive information type (SIT) based on that form. Document fingerprinting makes it easier for you to protect sensitive information by identifying standard forms that are used throughout your organization.
Document fingerprinting includes the following benefits:
SITs created from document fingerprinting can be used as a detection method in DLP policies scoped to Exchange, SharePoint, OneDrive, Teams, and Devices.
Etc.
Box 2: Microsoft Purview insider risk management
Generates an alert if a user downloads an above average number of files that contain data from DB1 Microsoft Purview, Configure intelligent detections in insider risk management Use can use the Intelligent detections setting in Microsoft Purview Insider Risk Management to:
* Boost the score for unusual file download activities by entering a minimum number of daily events.
* Etc.
File activity detection
You can use this section to specify the number of daily events required to boost the risk score for download activity that's considered unusual for a user. For example, if you enter "25", if a user downloads 10 files on average over the previous 30 days, but a policy detects that they downloaded 20 files on one day, the score for that activity won't be boosted even though it's unusual for that user because the number of files they downloaded that day was less than 25.
Reference:
https://learn.microsoft.com/en-us/purview/sit-document-fingerprinting
https://learn.microsoft.com/en-us/purview/insider-risk-management-settings-intelligent-detections

Instead of running never-ending compliance scans, security baselines assessment helps you to continuously and effortlessly monitor your organization's security baselines compliance and identify changes in real time.
A security baseline profile is a customized profile that you can create to assess and monitor endpoints in your organization against industry security benchmarks. When you create a security baseline profile, you're creating a template that consists of multiple device configuration settings and a base benchmark to compare against.
Security baselines provide support for Center for Internet Security (CIS) benchmarks for Windows
10, Windows 11, and Windows Server 2008 R2 and above, as well as Security Technical Implementation Guides (STIG) benchmarks for Windows 10 and Windows Server 2019.
Reference:
https://learn.microsoft.com/en-us/defender-vulnerability-management/tvm-security-baselines

Explanation:
Box 1: Static application security testing (SAST)
Commit the code

Box 2: Dynamic application security testing (DAST)
Build and test
Reference:
https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/secure/devsecops-controls

By default, the Kubernetes API server uses a public IP address and a fully qualified domain name (FQDN). You can limit access to the API server endpoint using authorized IP ranges. You can also create a fully private cluster to limit API server access to your virtual network.
Reference:
https://learn.microsoft.com/en-us/azure/aks/concepts-security

Configure private network connectors for Microsoft Entra Private Access and Microsoft Entra application proxy Connectors are lightweight agents that sit on a server in a private network and facilitate the outbound connection to the Global Secure Access service.
Connectors must be installed on a Windows Server that has access to the backend resources and applications. You can organize connectors into connector groups, with each group handling traffic to specific applications.
Reference:
https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-configure-connectors