Microsoft Azure Security Technology (AZ-500) Cert Prep

7h 30mIntermediate2024-08-19

Authors

Microsoft Press

Microsoft

Tim Warner

Technical Trainer and Content Developer

Course details

The Microsoft Azure Security Technologies (AZ-500) certification showcases your skills as an IT professional and vets your abilities as a Microsoft Azure Security Engineer Associate. In this course, join technical trainer and content developer Tim Warner as he provides an overview of the skills you need to master to tackle the official Microsoft Azure Security Technologies (AZ-500) certification exam. Learn how to manage Microsoft Entra identities, authentication, authorization, and application access, and plan and implement security for virtual networks and private and public access to Azure resources such as compute, storage, Azure SQL Database, Azure SQL Managed Instance, and more. Along the way, get tips on configuring and managing security posture and threat protection using Microsoft Defender for Cloud.

Skills covered

Cloud AdministrationAzureCloud PlatformsCert PrepCloud ComputingMicrosoft

Concepts

0. Introduction

01 - Exam AZ-500 - Microsoft Azure Security Technologies

1. Manage Microsoft Entra Identities

02 - Learning objectives
03 - Secure Microsoft Entra users
04 - Secure Microsoft Entra groups
05 - Recommend when to use external identities
06 - Secure external identities
07 - Implement Microsoft Entra ID protection

2. Manage Microsoft Entra Authentication

08 - Learning objectives
09 - Configure Microsoft Entra verified ID
10 - Implement multifactor authentication (MFA)
11 - Implement passwordless authentication
12 - Implement password protection
13 - Implement single sign-on (SSO)
14 - Integrate single sign-on (SSO) and identity providers
15 - Recommend and enforce modern authentication protocols

3. Manage Microsoft Entra Authorization

16 - Learning objectives
17 - Configure Azure role permissions for management groups, subscriptions, resource groups, and resources
18 - Assign Microsoft Entra built-in roles
19 - Assign Azure built-in roles
20 - Create and assign custom roles, including Azure roles and Microsoft Entra roles
21 - Implement and manage Microsoft Entra permissions management
22 - Configure Microsoft Entra privileged identity management
23 - Configure role management and access reviews in Microsoft Entra
24 - Implement conditional access policies

4. Manage Microsoft Entra Application Access

25 - Learning objectives
26 - Manage access to enterprise applications in Microsoft Entra ID, including OAuth permission grants
27 - Manage Microsoft Entra app registrations
28 - Configure app registration permission scopes
29 - Manage app registration permission consent
30 - Manage and use service principals
31 - Manage managed identities for Azure resources
32 - Recommend when to use and configure a Microsoft Entra application proxy, including authentication

5. Plan and Implement Security for Virtual Networks

33 - Learning objectives
34 - Plan and implement network security groups (NSGs) and application security groups (ASGs)
35 - Plan and implement user-defined routes (UDRs)
36 - Plan and implement virtual network peering or VPN gateway
37 - Plan and implement virtual WAN, including secured virtual hub
38 - Secure VPN connectivity, including point-to-site and site-to-site
39 - Implement encryption over ExpressRoute
40 - Configure firewall settings on PaaS resources
41 - Monitor network security using network watcher, including NSG flow logging

6. Plan and Implement Security for Private Access to Azure Resources

42 - Learning objectives
43 - Plan and implement virtual network service endpoints
44 - Plan and implement private endpoints
45 - Plan and implement private link services
46 - Plan and implement network integration for Azure App Service and Azure Functions
47 - Plan and implement network security configurations for an App Service Environment (ASE)
48 - Plan and implement network security configurations for an Azure SQL Managed Instance

7. Plan and Implement Security for Public Access to Azure Resources

49 - Learning objectives
50 - Plan and implement transport layer security (TLS) to applications, including Azure App Service and Azure API Management
51 - Plan, implement, and manage an Azure firewall, including Azure Firewall Manager and firewall policies
52 - Plan and implement an Azure Application Gateway
53 - Plan and implement an Azure Front Door, including content delivery network (CDN)
54 - Plan and implement a web application firewall (WAF)
55 - Recommend when to use Azure DDoS Protection standard

8. Plan and Implement Advanced Security for Compute

56 - Learning objectives
57 - Plan and implement remote access to public endpoints, including Azure Bastion and JIT VM access
58 - Configure network isolation for Azure Kubernetes Service (AKS)
59 - Secure and monitor AKS
60 - Configure authentication for AKS
61 - Configure security monitoring for Azure Container Instances (ACIs)
62 - Configure security monitoring for Azure Container Apps (ACAs)
63 - Manage access to Azure Container Registry (ACR)
64 - Configure disk encryption, including Azure Disk Encryption (ADE), encryption as host, and confidential disk encryption
65 - Recommend security configurations for Azure API Management

9. Plan and Implement Security for Storage

66 - Learning objectives
67 - Configure access control for storage accounts
68 - Manage the lifecycle for storage account access keys
69 - Select and configure an appropriate method for access to Azure Files
70 - Select and configure an appropriate method for access to Azure Blob storage
71 - Select and configure an appropriate method for access to Azure Table storage
72 - Select and configure an appropriate method for access to Azure Queue Storage
73 - Select and configure appropriate methods for protecting against data security threats
74 - Configure bring your own key (BYOK)
75 - Enable double encryption at the Azure storage infrastructure level

10. Plan and Implement Security for Azure SQL Database and Azure SQL Managed Instance

76 - Learning objectives
77 - Enable Microsoft Entra database authentication
78 - Enable database auditing
79 - Identify use cases for the Microsoft Purview governance portal
80 - Implement data classification of sensitive information using the Microsoft Purview governance portal
81 - Plan and implement dynamic masking
82 - Implement transparent database encryption (TDE)
83 - Recommend when to use Azure SQL database always encrypted

11. Plan, Implement, and Manage Governance for Security

84 - Learning objectives
85 - Create, assign, and interpret security policies and initiatives in Azure Policy
86 - Configure security settings using Azure Blueprints
87 - Deploy secure infrastructures using a landing zone
88 - Create and configure an Azure Key Vault
89 - Recommend when to use a dedicated hardware security module (HSM)
90 - Configure access to Key Vault, including vault access policies and Azure role-based access control
91 - Manage certificates, secrets, and keys
92 - Configure key rotation
93 - Configure backup and recovery of certificates, secrets, and keys

12. Manage Security Posture Using Microsoft Defender for Cloud

94 - Learning objectives
95 - Identify and remediate security risks by using the Microsoft Defender for Cloud secure score and inventory
96 - Assess compliance against security frameworks and Microsoft Defender for cloud
97 - Add industry and regulatory standards to Microsoft Defender for Cloud
98 - Add custom initiatives to Microsoft Defender for cloud
99 - Connect hybrid cloud and multi-cloud environments to Microsoft Defender for cloud
100 - Identify and monitor external assets by using Microsoft Defender external attack surface management

13. Configure and Manage Threat Protection Using Microsoft Defender for Cloud

101 - Learning objectives
102 - Enable workload protection services
103 - Configure Microsoft Defender for Servers
104 - Configure Microsoft Defender for Azure SQL
105 - Manage and respond to security alerts in Microsoft Defender for Cloud
106 - Configure workflow automation using Microsoft Defender for Cloud
107 - Evaluate vulnerability scans from Microsoft Defender for Servers

14. Configure and Manage Security Monitoring and Automation Solutions

108 - Learning objectives
109 - Monitor security events using Azure Monitor
110 - Configure data connectors in Microsoft Sentinel
111 - Create and customize analytics rules in Microsoft Sentinel
112 - Evaluate alerts and incidents in Microsoft Sentinel
113 - Configure automation in Microsoft Sentinel