Merge pull request #29650 from rwestMSFT/rw-0125-fix-warnings

[SCOPED] Fix build warnings

Author: v-dirichards

docs/relational-databases/security/sql-server-security-best-practices.md

@@ -156,8 +156,8 @@ To minimize the risk of a side-channel attack, consider the following:
 Consider the following common infrastructure threats: 
 
 - [Brute force access](/defender-for-identity/compromised-credentials-alerts) - the attacker attempts to authenticate with multiple passwords on different accounts until a correct password is found.
-- Password cracking / [password spray](/security/compass/incident-response-playbook-password-spray) - attackers try a single carefully crafted password against all of the known user accounts (one password to many accounts). If the initial password spray fails, they try again, utilizing a different carefully crafted password, normally waiting a set amount of time between attempts to avoid detection.
-- [Ransomware attacks](/windows/security/threat-protection/intelligence/ransomware-malware) is a type of targeted attack where malware is used to encrypt data and files, preventing access to important content. The attackers then attempt to extort money from victims, usually in the form of cryptocurrencies, in exchange for the decryption key. Most ransomware infections start with email messages with attachments that try to install ransomware,  or websites hosting exploit kits that attempt to use vulnerabilities in web browsers and other software to install ransomware. 
+- Password cracking / [password spray](/security/operations/incident-response-playbook-password-spray) - attackers try a single carefully crafted password against all of the known user accounts (one password to many accounts). If the initial password spray fails, they try again, utilizing a different carefully crafted password, normally waiting a set amount of time between attempts to avoid detection.
+- [Ransomware attacks](/security/ransomware/human-operated-ransomware) is a type of targeted attack where malware is used to encrypt data and files, preventing access to important content. The attackers then attempt to extort money from victims, usually in the form of cryptocurrencies, in exchange for the decryption key. Most ransomware infections start with email messages with attachments that try to install ransomware,  or websites hosting exploit kits that attempt to use vulnerabilities in web browsers and other software to install ransomware. 
 
 ### Password risks
 
@@ -177,7 +177,7 @@ Since you don't want attackers to easily guess account names, or passwords, the
 
 Consider the following to minimize ransomware risks: 
 
-- The best strategy to guard against [ransomware](/windows/security/threat-protection/intelligence/ransomware-malware) is to pay particular attention to RDP and SSH vulnerabilities. Additionally, consider the following: 
+- The best strategy to guard against [ransomware](/security/ransomware/human-operated-ransomware) is to pay particular attention to RDP and SSH vulnerabilities. Additionally, consider the following: 
     - Leverage firewalls and lock down ports
     - Ensuring the latest operating system and application security updates are applied
     - Use [group managed service accounts (gMSA)](/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview)