AZ-500T00MSMicrosoftMS-AZ-500T00A<ul> <li>Implement enterprise governance strategies including role-based access control, Azure policies, and resource locks.</li><li>Implement an Azure AD infrastructure including users, groups, and multi-factor authentication.</li><li>Implement Azure AD Identity Protection including risk policies, conditional access, and access reviews.</li><li>Implement Azure AD Privileged Identity Management including Azure AD roles and Azure resources.</li><li>Implement Azure AD Connect including authentication methods and on-premises directory synchronization.</li><li>Implement perimeter security strategies including Azure Firewall.</li><li>Implement network security strategies including Network Security Groups and Application Security Groups.</li><li>Implement host security strategies including endpoint protection, remote access management, update management, and disk encryption.</li><li>Implement container security strategies including Azure Container Instances, Azure Container Registry, and Azure Kubernetes.</li><li>Implement Azure Key Vault including certificates, keys, and secretes.</li><li>Implement application security strategies including app registration, managed identities, and service endpoints.</li><li>Implement storage security strategies including shared access signatures, blob retention policies, and Azure Files authentication.</li><li>Implement database security strategies including authentication, data classification, dynamic data masking, and always encrypted.</li><li>Implement Azure Monitor including connected sources, log analytics, and alerts.</li><li>Implement Azure Security Center including policies, recommendations, and just in time virtual machine access.</li><li>Implement Azure Sentinel including workbooks, incidents, and playbooks.</li></ul><p>Successful learners will have prior knowledge and understanding of:</p> <ul> <li>Security best practices and industry security requirements such as defense in depth, least privileged access, role-based access control, multi-factor authentication, shared responsibility, and zero trust model.</li><li>Be familiar with security protocols such as Virtual Private Networks (VPN), Internet Security Protocol (IPSec), Secure Socket Layer (SSL), disk and data encryption methods.</li><li>Have some experience deploying Azure workloads. This course does not cover the basics of Azure administration, instead the course content builds on that knowledge by adding security specific information.</li><li>Have experience with Windows and Linux operating systems and scripting languages. Course labs may use PowerShell and the CLI.</li></ul><p>Prior attendance of the course <span class="cms-link-marked"><a class="fl-href-prod" href="/ibb/en/course/microsoft-az-104t00"><svg role="img" aria-hidden="true" focusable="false" data-nosnippet class="cms-linkmark"><use xlink:href="/css/img/icnset-linkmarks.svg#linkmark"></use></svg>Microsoft Azure Administrator <span class="fl-prod-pcode">(AZ-104T00)</span></a></span> is recommended.</p><p>This course is for Azure Security Engineers who are planning to take the associated certification exam, or who are performing security tasks in their day-to-day job. This course would also be helpful to an engineer that wants to specialize in providing security for Azure-based digital platforms and play an integral role in protecting an organization&#039;s data.</p><h5>Module 1: Manage Identity and Access</h5><p>This module covers Azure Active Directory, Azure Identity Protection, Enterprise Governance, Azure AD PIM, and Hybrid Identity.</p> <h5>Lessons</h5><ul> <li>Azure Active Directory</li><li>Azure Identity Protection</li><li>Enterprise Governance</li><li>Azure AD Privileged Identity Management</li><li>Hybrid Identity</li><li>Lab: Role-Based Access Control</li><li>Lab: Azure Policy</li><li>Lab: Resource Manager Locks</li><li>Lab: MFA, Conditional Access and AAD Identity Protection</li><li>Lab: Azure AD Privileged Identity Management</li><li>Lab: Implement Directory Synchronization</li></ul><p>After completing this module, students will be able to:</p> <ul> <li>Implement enterprise governance strategies including role-based access control, Azure policies, and resource locks.</li><li>Implement an Azure AD infrastructure including users, groups, and multi-factor authentication.</li><li>Implement Azure AD Identity Protection including risk policies, conditional access, and access reviews.</li><li>Implement Azure AD Privileged Identity Management including Azure AD roles and Azure resources.</li><li>Implement Azure AD Connect including authentication methods and on-premises directory synchronization.</li></ul><h5>Module 2: Implement Platform Protection</h5><p>This module covers perimeter, network, host, and container security.</p> <h5>Lessons</h5><ul> <li>Perimeter Security</li><li>Network Security</li><li>Host Security</li><li>Container Security</li><li>Lab: Network Security Groups and Application Security Groups</li><li>Lab: Azure Firewall</li><li>Lab: Configuring and Securing ACR and AKS</li></ul><p>After completing this module, students will be able to:</p> <ul> <li>Implement perimeter security strategies including Azure Firewall.</li><li>Implement network security strategies including Network Security Groups and Application Security Groups.</li><li>Implement host security strategies including endpoint protection, remote access management, update management, and disk encryption.</li><li>Implement container security strategies including Azure Container Instances, Azure Container Registry, and Azure Kubernetes.</li></ul><h5>Module 3: Secure Data and Applications</h5><p>This module covers Azure Key Vault, application security, storage security, and SQL database security.</p> <h5>Lessons</h5><ul> <li>Azure Key Vault</li><li>Application Security</li><li>Storage Security</li><li>SQL Database Security</li><li>Lab: Key Vault (Implementing Secure Data by setting up Always Encrypted)</li><li>Lab: Securing Azure SQL Database</li><li>Lab: Service Endpoints and Securing Storage</li></ul><p>After completing this module, students will be able to:</p> <ul> <li>Implement Azure Key Vault including certificates, keys, and secretes.</li><li>Implement application security strategies including app registration, managed identities, and service endpoints.</li><li>Implement storage security strategies including shared access signatures, blob retention policies, and Azure Files authentication.</li><li>Implement database security strategies including authentication, data classification, dynamic data masking, and always encrypted.</li></ul><h5>Module 4: Manage Security Operations</h5><p>This module covers Azure Monitor, Azure Security Center, and Azure Sentinel.</p> <h5>Lessons</h5><ul> <li>Azure Monitor</li><li>Azure Security Center</li><li>Azure Sentinel</li><li>Lab: Azure Monitor</li><li>Lab: Azure Security Center</li><li>Lab: Azure Sentinel</li></ul><p>After completing this module, students will be able to:</p> <ul> <li>Implement Azure Monitor including connected sources, log analytics, and alerts.</li><li>Implement Azure Security Center including policies, recommendations, and just in time virtual machine access.</li><li>Implement Azure Sentinel including workbooks, incidents, and playbooks.</li></ul>- Implement enterprise governance strategies including role-based access control, Azure policies, and resource locks. - Implement an Azure AD infrastructure including users, groups, and multi-factor authentication. - Implement Azure AD Identity Protection including risk policies, conditional access, and access reviews. - Implement Azure AD Privileged Identity Management including Azure AD roles and Azure resources. - Implement Azure AD Connect including authentication methods and on-premises directory synchronization. - Implement perimeter security strategies including Azure Firewall. - Implement network security strategies including Network Security Groups and Application Security Groups. - Implement host security strategies including endpoint protection, remote access management, update management, and disk encryption. - Implement container security strategies including Azure Container Instances, Azure Container Registry, and Azure Kubernetes. - Implement Azure Key Vault including certificates, keys, and secretes. - Implement application security strategies including app registration, managed identities, and service endpoints. - Implement storage security strategies including shared access signatures, blob retention policies, and Azure Files authentication. - Implement database security strategies including authentication, data classification, dynamic data masking, and always encrypted. - Implement Azure Monitor including connected sources, log analytics, and alerts. - Implement Azure Security Center including policies, recommendations, and just in time virtual machine access. - Implement Azure Sentinel including workbooks, incidents, and playbooks.Successful learners will have prior knowledge and understanding of: - Security best practices and industry security requirements such as defense in depth, least privileged access, role-based access control, multi-factor authentication, shared responsibility, and zero trust model. - Be familiar with security protocols such as Virtual Private Networks (VPN), Internet Security Protocol (IPSec), Secure Socket Layer (SSL), disk and data encryption methods. - Have some experience deploying Azure workloads. This course does not cover the basics of Azure administration, instead the course content builds on that knowledge by adding security specific information. - Have experience with Windows and Linux operating systems and scripting languages. Course labs may use PowerShell and the CLI. Prior attendance of the course Microsoft Azure Administrator (AZ-104T00) is recommended.This course is for Azure Security Engineers who are planning to take the associated certification exam, or who are performing security tasks in their day-to-day job. This course would also be helpful to an engineer that wants to specialize in providing security for Azure-based digital platforms and play an integral role in protecting an organization's data.Module 1: Manage Identity and Access This module covers Azure Active Directory, Azure Identity Protection, Enterprise Governance, Azure AD PIM, and Hybrid Identity. Lessons - Azure Active Directory - Azure Identity Protection - Enterprise Governance - Azure AD Privileged Identity Management - Hybrid Identity - Lab: Role-Based Access Control - Lab: Azure Policy - Lab: Resource Manager Locks - Lab: MFA, Conditional Access and AAD Identity Protection - Lab: Azure AD Privileged Identity Management - Lab: Implement Directory Synchronization After completing this module, students will be able to: - Implement enterprise governance strategies including role-based access control, Azure policies, and resource locks. - Implement an Azure AD infrastructure including users, groups, and multi-factor authentication. - Implement Azure AD Identity Protection including risk policies, conditional access, and access reviews. - Implement Azure AD Privileged Identity Management including Azure AD roles and Azure resources. - Implement Azure AD Connect including authentication methods and on-premises directory synchronization. Module 2: Implement Platform Protection This module covers perimeter, network, host, and container security. Lessons - Perimeter Security - Network Security - Host Security - Container Security - Lab: Network Security Groups and Application Security Groups - Lab: Azure Firewall - Lab: Configuring and Securing ACR and AKS After completing this module, students will be able to: - Implement perimeter security strategies including Azure Firewall. - Implement network security strategies including Network Security Groups and Application Security Groups. - Implement host security strategies including endpoint protection, remote access management, update management, and disk encryption. - Implement container security strategies including Azure Container Instances, Azure Container Registry, and Azure Kubernetes. Module 3: Secure Data and Applications This module covers Azure Key Vault, application security, storage security, and SQL database security. Lessons - Azure Key Vault - Application Security - Storage Security - SQL Database Security - Lab: Key Vault (Implementing Secure Data by setting up Always Encrypted) - Lab: Securing Azure SQL Database - Lab: Service Endpoints and Securing Storage After completing this module, students will be able to: - Implement Azure Key Vault including certificates, keys, and secretes. - Implement application security strategies including app registration, managed identities, and service endpoints. - Implement storage security strategies including shared access signatures, blob retention policies, and Azure Files authentication. - Implement database security strategies including authentication, data classification, dynamic data masking, and always encrypted. Module 4: Manage Security Operations This module covers Azure Monitor, Azure Security Center, and Azure Sentinel. Lessons - Azure Monitor - Azure Security Center - Azure Sentinel - Lab: Azure Monitor - Lab: Azure Security Center - Lab: Azure Sentinel After completing this module, students will be able to: - Implement Azure Monitor including connected sources, log analytics, and alerts. - Implement Azure Security Center including policies, recommendations, and just in time virtual machine access. - Implement Azure Sentinel including workbooks, incidents, and playbooks.4 days2590.001690.001500.002590.001200.003400.008990.001000.001000.001000.001499.001919.002395.001995.002590.002595.002595.002610.0065600.003380.001995.002590.002950.00