Target audience
This course is for Azure Security Engineers who are planning to take the associated certification exam, or who are performing security tasks in their day-to-day job. This course would also be helpful to an engineer that wants to specialize in providing security for Azure-based digital platforms and play an integral role in protecting an organization's data.
Course content
Module 1: Manage Identity and Access
This module covers Azure Active Directory, Azure Identity Protection, Enterprise Governance, Azure AD PIM, and Hybrid Identity.
Lessons
- Azure Active Directory
- Azure Identity Protection
- Enterprise Governance
- Azure AD Privileged Identity Management
- Hybrid Identity
- Lab : Role-Based Access Control
- Lab : Azure Policy
- Lab : Resource Manager Locks
- Lab : MFA, Conditional Access and AAD Identity Protection
- Lab : Azure AD Privileged Identity Management
- Lab : Implement Directory Synchronization
Module 2: Implement Platform Protection
This module covers perimeter, network, host, and container security.
Lessons
- Perimeter Security
- Network Security
- Host Security
- Container Security
- Lab : Network Security Groups and Application Security Groups
- Lab : Azure Firewall
- Lab : Configuring and Securing ACR and AKS
Module 3: Secure Data and Applications
This module covers Azure Key Vault, application security, storage security, and SQL database security.
Lessons
- Azure Key Vault
- Application Security
- Storage Security
- SQL Database Security
- Lab : Key Vault (Implementing Secure Data by setting up Always Encrypted)
- Lab : Securing Azure SQL Database
- Lab : Service Endpoints and Securing Storage
Module 4: Manage Security Operations
This module covers Azure Monitor, Azure Security Center, and Azure Sentinel.
Lessons
- Azure Monitor
- Azure Security Center
- Azure Sentinel
- Lab : Azure Monitor
- Lab : Azure Security Center
- Lab : Azure Sentinel
Materials
Materials are in electronic form.
Objectives
After completing this course, students will be able to:
- Implement enterprise governance strategies including role-based access control, Azure policies, and resource locks.
- Implement an Azure AD infrastructure including users, groups, and multi-factor authentication.
- Implement Azure AD Identity Protection including risk policies, conditional access, and access reviews.
- Implement Azure AD Privileged Identity Management including Azure AD roles and Azure resources.
- Implement Azure AD Connect including authentication methods and on-premises directory synchronization.
- Implement perimeter security strategies including Azure Firewall.
- Implement network security strategies including Network Security Groups and Application Security Groups.
- Implement host security strategies including endpoint protection, remote access management, update management, and disk encryption.
- Implement container security strategies including Azure Container Instances, Azure Container Registry, and Azure Kubernetes.
- Implement Azure Key Vault including certificates, keys, and secretes.
- Implement application security strategies including app registration, managed identities, and service endpoints.
- Implement storage security strategies including shared access signatures, blob retention policies, and Azure Files authentication.
- Implement database security strategies including authentication, data classification, dynamic data masking, and always encrypted.
- Implement Azure Monitor including connected sources, log analytics, and alerts.
- Implement Azure Security Center including policies, recommendations, and just in time virtual machine access.
- Implement Azure Sentinel including workbooks, incidents, and playbooks.
