Microsoft Azure Security Technologies AZ500 - United Kingdom

Microsoft Azure Security Technologies AZ-500 Course Outline

Module 1: Secure Azure Solutions with Azure Active Directory

• Introduction
• Explore Azure Active Directory Features
• Self-Managed Active Directory Domain Services, Azure Active Directory, and Managed Azure Active Directory Domain Services
• Azure AD DS and Self-Managed AD DS
• Azure AD DS and Azure AD
• Investigate Roles in Azure AD
• Azure AD Built-in Roles
• Deploy Azure AD Domain Services
• Create and Manage Azure AD Users
• Manage Users with Azure AD Groups
• Configure Azure AD Administrative Units
• Implement Passwordless Authentication
• Explore Try-This Exercises

Module 2: Implement Hybrid Identity

• Introduction
• Deploy Azure AD Connect
• Explore Authentication Options
• Configure Password Hash Synchronisation (PHS)
• Implement Pass-Through Authentication (PTA)
• Deploy Federation with Azure AD
• Explore the Authentication Decision Tree
• Configure Password Writeback

Module 3: Deploy Azure AD identity protection

• Introduction
• Explore Azure AD Identity Protection
• Configure Risk Event Detections
• Implement User Risk Policy
• Implement Sign-in Risk Policy
• Deploy Multifactor Authentication in Azure
• Explore Multifactor Authentication Settings
• Enable Multifactor Authentication
• Implement Azure AD Conditional Access
• Configure Conditional Access Conditions
• Implement Access reviews
• Explore Try-This Exercises

Module 4: Configure Azure AD Privileged Identity Management

• Introduction
• Explore the Zero Trust Model
• Review the Evolution of Identity Management
• Deploy Azure AD Privileged Identity Management
• Configure Privileged Identity Management Scope
• Implement Privileged Identity Management Onboarding
• Explore Privileged Identity Management Configuration Settings
• Implement a Privileged Identity Management Workflow
• Explore Try-This Exercises

Module 5: Design an Enterprise Governance Strategy

• Introduction
• Review the Shared Responsibility Model
• Explore the Azure Cloud Security Advantages
• Review Azure Hierarchy of Systems
• Configure Azure Policies
• Enable Azure Role-Based Access Control (RBAC)
• Compare and Contrast Azure RBAC vs Azure Policies
• Configure Built-in Roles
• Enable Resource Locks
• Deploy Azure Blueprints
• Design an Azure Subscription Management Plan
• Explore Try-This Exercises

Module 6: Implement Perimeter Security

• Introduction
• Define Defense in Depth
• Explore Virtual Network Security
• Enable Distributed Denial of Service (DDoS) Protection
• Configure a Distributed Denial of Service Protection Implementation
• Explore Azure Firewall Features
• Deploy an Azure Firewall Implementation
• Configure VPN Forced Tunneling
• Create User Defined Routes and Network Virtual Appliances
• Explore Hub and Spoke Topology
• Perform Try-this Exercises

Module 7: Configure Network Security

• Introduction
• Explore Network Security Groups (NSG)
• Deploy a Network Security Groups Implementation
• Create Application Security Groups
• Enable Service Endpoints
• Configure Service Endpoint Services
• Deploy Private Links
• Implement an Azure Application Gateway
• Deploy a Web Application Firewall
• Configure and Manage Azure Front Door
• Review ExpressRoute
• Perform Try-This Exercises

Module 8: Configure and Manage Host Security

• Introduction
• Enable Endpoint Protection
• Define a Privileged Access Device Strategy
• Deploy Privileged Access Workstations
• Create Virtual Machine Templates
• Enable and Secure Remote Access Management
• Configure Update Management
• Deploy Disk Encryption
• Managed Disk Encryption Options
• Deploy and Configure Windows Defender
• Microsoft Cloud Security Benchmark in Defender for Cloud
• Explore Microsoft Defender for Cloud Recommendations
• Perform Try-This Exercises

Module 9: Enable Containers Security

• Introduction
• Explore Containers
• Configure Azure Container Instances Security
• Manage Security for Azure Container Instances (ACI)
• Explore the Azure Container Registry (ACR)
• Enable Azure Container Registry Authentication
• Review Azure Kubernetes Service (AKS)
• Implement an Azure Kubernetes Service Architecture
• Configure Azure Kubernetes Service Networking
• Deploy Azure Kubernetes Service Storage
• Secure Authentication to Azure Kubernetes Service with Active Directory
• Manage Access to Azure Kubernetes Service using Azure Role-Based Access Controls

Module 10: Deploy and Secure Azure Key Vault

• Introduction
• Explore Azure Key Vault
• Configure Key Vault Access
• Review a Secure Key Vault Example
• Deploy and Manage Key Vault Certificates
• Create Key Vault Keys
• Manage Customer Managed Keys
• Enable Key Vault Secrets
• Configure Key Rotation
• Manage Key Vault Safety and Recovery Features
• Perform Try-This Exercises
• Explore the Azure Hardware Security Module

Module 11: Configure Application Security Features

• Introduction
• Review the Microsoft Identity Platform
• Explore the Application Model
• Register an Application with App Registration
• Configure Microsoft Graph Permissions
• Enable Managed Identities
• Azure App Services
• App Service Environment
• Azure App Service Plan
• App Service Environment Networking
• Availability Zone Support for App Service Environments
• App Service Environment Certificates
• Perform Try-This Exercises

Module 12: Implement Storage Security

• Introduction
• Define Data Sovereignty
• Configure Azure Storage Access
• Deploy Shared Access Signatures
• Manage Azure AD Storage Authentication
• Implement Storage Service Encryption
• Configure Blob Data Retention Policies
• Configure Azure Files Authentication
• Enable the Secure Transfer Required Property
• Perform Try-This Exercises

Module 13: Configure and Manage SQL Database Security

• Introduction
• Enable SQL Database Authentication
• Configure SQL Database Firewalls
• Enable and Monitor Database Auditing
• Implement Data Discovery and Classification
• Microsoft Defender for SQL
• Vulnerability Assessment for SQL Server
• SQL Advanced Threat Protection
• Explore Detection of a Suspicious Event
• SQL Vulnerability Assessment Express and Classic Configurations
• Configure Dynamic Data Masking
• Implement Transparent Data Encryption
• Deploy Always Encrypted Features
• Deploy an Always Encrypted Implementation
• Perform Try-This Exercises

Module 14: Configure and Manage Azure Monitor

• Introduction
• Explore Azure Monitor
• Configure and Monitor Metrics and Logs
• Enable Log Analytics
• Manage Connected Sources for Log Analytics
• Enable Azure Monitor Alerts
• Configure Properties for Diagnostic Logging
• Perform Try-This Exercises

Module 15: Enable and Manage Microsoft Defender for Cloud

• Introduction
• MITRE Attack Matrix
• Implement Microsoft Defender for Cloud
• Security Posture
• Workload Protections
• Deploy Microsoft Defender for Cloud
• Azure Arc
• Azure Arc Capabilities
• Microsoft Cloud Security Benchmark
• Configure Microsoft Defender for Cloud Security Policies
• View and Edit Security Policies
• Manage and Implement Microsoft Defender for Cloud Recommendations
• Explore Secure Score
• Define Brute Force Attacks
• Understand Just-in-Time VM Access
• Implement Just-in-Time VM Access
• Perform Try-This Exercises

Module 16: Configure and Monitor Microsoft Sentinel

• Introduction
• Enable Microsoft Sentinel
• Configure Data Connections to Sentinel
• Create Workbooks to Monitor Sentinel Data
• Enable Rules to Create Incidents
• Configure Playbooks
• Hunt and Investigate Potential Breaches