AZ-500: Microsoft Azure Security Technologies

Course Code: 5017

AZ-500: Microsoft Azure Security Technologies

Prepare for the AZ-500: Microsoft Azure Security Technologies examination to earn the Microsoft Certified: Azure Security Engineer Associate certification

Course Code : 5017

Overview
Schedule classes
What you'll learn
Outline
Prerequisites
Who should attend

Overview

This course helps participants prepare for the AZ-500: Microsoft Azure Security Technologies examination. Clearing this examination will help participants earn the Microsoft Certified: Azure Security Engineer Associate certification. The course covers the essential skills participants need to prepare for the AZ-500 examination, including managing identity and access, implementing platform protection, managing security operations and securing data and applications.

Schedule Classes

Looking for more sessions of this class?

Course Delivery

This course is available in the following formats:

Live Classroom
Duration: 5 days

Live Virtual Classroom
Duration: 5 days

What You'll learn

Configure Microsoft Azure Active Directory for workloads
Configure Microsoft Azure tenant security
Implement network security
Implement host security
Configure container security
Configure security policies
Manage security alerts
Configure application security
Configure security for data infrastructure

Outline

Skill 1: Manage identity and access

Module 1: Configure Microsoft Azure Active Directory for workloads

Create App registration
Configure App registration permission scopes
Manage App registration permission consent
Configure multi-factor authentication settings
Manage Microsoft Azure AD directory groups
Manage Microsoft Azure AD users
Install and configure Microsoft Azure AD Connect
Configure authentication methods
Implement conditional access policies
Configure Microsoft Azure AD identity protection

Module 2: Configure Microsoft Azure AD Privileged Identity Management

Monitor privileged access
Configure access reviews
Activate Privileged Identity Management

Module 3: Configure Microsoft Azure tenant security

Transfer Microsoft Azure subscriptions between Microsoft Azure AD tenants
Manage API access to Microsoft Azure subscriptions and resources

Skill 2: Implement platform protection

Module 5: Implement host security

Configure endpoint security within the VM
Configure VM security
Harden VMs in Microsoft Azure
Configure system updates for VMs in Microsoft Azure
Configure baseline

Module 4: Implement network security

Configure virtual network connectivity
Configure Network Security Groups (NSGs)
Create and configure Microsoft Azure firewall
Create and configure application security groups
Configure remote access management
Configure baseline
Configure resource firewall

Module 6: Configure container security

Configure network
Configure authentication
Configure container isolation
Configure AKS security
Configure container registry
Configure container instance security
Implement vulnerability management

Module 7: Implement Microsoft Azure Resource management security

Create Microsoft Azure resource locks
Manage resource group security
Configure Microsoft Azure policies
Configure custom RBAC roles
Configure subscription and resource permissions

Skill 3: Manage security operations

Module 8: Configure security services

Configure Microsoft Azure monitor
Configure Microsoft Azure log analytics
Configure diagnostic logging and log retention
Configure vulnerability scanning

Module 9: Configure security policies

Configure centralized policy management by using Microsoft Azure Security Center
Configure Just in Time VM access by using Microsoft Azure Security Center

Module 10: Manage security alerts

Create and customize alerts
Review and respond to alerts and recommendations
Configure a playbook for a security event by using Microsoft Azure Security Center
Investigate escalated security incidents

Skill 4: Secure data and applications

Module 11: Configure security policies to manage data

Configure data classification
Configure data retention
Configure data sovereignty

Module 12: Configure security for data infrastructure

Enable database authentication
Enable database auditing
Configure Microsoft Azure SQL Database threat detection
Configure access control for storage accounts
Configure key management for storage accounts
Create and manage Shared Access Signatures (SAS)
Configure security for HDInsights
Configure security for Cosmos DB
Configure security for Microsoft Azure Data Lake

Module 13: Configure encryption for data at rest

Implement Microsoft Azure SQL Database Always Encrypted
Implement database encryption
Implement Storage Service Encryption
Implement disk encryption
Implement backup encryption

Module 14: Implement security for application delivery

Implement security validations for application development
Configure synthetic security transactions

Module 15: Configure application security

Configure SSL/TLS certs
Configure Microsoft Azure services to protect web apps
Create an application security baseline

Module 16: Configure and manage Key Vault

Manage access to Key Vault
Manage permissions to secrets, certificates, and keys
Manage certificates
Manage secrets
Configure key rotation

Prerequisites

To attend this course, participants need to have strong skills in scripting and automation, a deep understanding of networking, virtualization and cloud N-tier architecture. Participants also need to have a strong familiarity with cloud capabilities, Microsoft Azure products and services, and other Microsoft products and services.

Who Should Attend

The course is highly recommend for –

Cloud security professionals
Security administrators
Security architects
Cybersecurity professionals
Security engineers
Software engineers

Interested in this course? Let’s connect!

Certification

This course helps participants prepare for the AZ-500: Microsoft Azure Security Technologies examination. Clearing this examination is a mandatory requirement for earning the Microsoft Certified: Azure Security Engineer Associate certification. The certificate speaks for the participant’s ability to implement security controls and threat protection, manage identities and access, protect data, applications and networks in the cloud and hybrid environment as part of the end-to-end infrastructure.