AZ -500 -Microsoft Azure Security Technologies

Module-1: Architecture of Microsoft Azure with Microsoft Azure security Technologies

1. Cloud Security Threats
2. Zero Trust Security Principles
3. A Big Picture with All the Azure Security Technologies (end to end Integration)

Module-2: Securing Identities in Microsoft Entra ID

1. Architecture of Entra ID
2. Cloud and Hybrid Identity
3. Default and Custom Domain
4. Authentication options
5. Securing Cloud and hybrid identities
6. Multifactor Authentication o Conditional Access
7. Protecting Sign-in risk
8. Microsoft Entra PHS, PTA and Federation
9. Password Less Authentication and password protection
10. Privileged Identity Management
11. Manage Service principals and Managed Identities
12. App registrations and Permissions Consent
13. Microsoft Entra ID Application Proxyo Azure Role Based Access Controls
14. Builtin and custom Roles
15. dentity Life Cycle Management
16. Life Cycle Workflows o Access Reviews

Module -3 Securing Networking

1. Securing Subnets and Virtual machines Network Security Group
2. Securing Web Applications with WAF (Web Application Firewall)
3. Securing the Entire VNET using Azure Firewall Appliance
4. Securing the Content delivery Network with Azure Front door
5. Securing Networks from DDOS Attack (DDOS protection)

Module-4 Secure Compute, Storage, and Databases

1. Securing Disk using Azure Disk Encryption
2. Securing Azure Kubernetes Services and Azure Container Services
3. Securing Azure Storage Accounts
4. Access control for Storage Accounts Services
5. ▪ Storage Account Keys
6. ▪ Shared Access Signature
7. ▪ Storage Firewall
8. Securing database
9. Data Base Firewall ▪
10. Data Base Always Encryption and Transparent Data Encryption ▪
11. Apply Dynamic Mask

Module-5: Manage Security Operations.

1. Azure Governanceo Azure Policy
2. Azure key Vault o Manage Certificates, secrets and keys
3. Defender for Different Services
4. Assess the incidents and Alerts
5. Microsoft defender for cloud
6. Assess compliance against security frameworks and Microsoft Defender for Cloud
7. Microsoft sentinel and Data Connectors
8. Alerts and Incidents in Sentinel

Lab :1

• Muti-factor Authentication
• Conditional Access
• Implementing Sign-in risk, User-Risk
• Implementing PHS, PTA, Federated Authentication and Security

Lab: 2

• Network Security Group
• Web Application Firewall
• Azure Firewall Appliance
• DDOS Protection

Lab : 3

• Azure Disk Encryption
• Azure Storage Encryption
• Azure storage Firewall
• Azure Shared Access Signature
• Azure Storage Endpoint
• Data base Encryption and Mask

Lab :3

• Azure Policy  
• Azure Secrets and keys  
• Analyze the Security posture of Microsoft azure

‍