AZ-500T00MSMicrosoftMS-AZ-500T00A<ul> <li>Implement enterprise governance strategies including role-based access control, Azure policies, and resource locks.</li><li>Implement an Azure AD infrastructure including users, groups, and multi-factor authentication.</li><li>Implement Azure AD Identity Protection including risk policies, conditional access, and access reviews.</li><li>Implement Azure AD Privileged Identity Management including Azure AD roles and Azure resources.</li><li>Implement Azure AD Connect including authentication methods and on-premises directory synchronization.</li><li>Implement perimeter security strategies including Azure Firewall.</li><li>Implement network security strategies including Network Security Groups and Application Security Groups.</li><li>Implement host security strategies including endpoint protection, remote access management, update management, and disk encryption.</li><li>Implement container security strategies including Azure Container Instances, Azure Container Registry, and Azure Kubernetes.</li><li>Implement Azure Key Vault including certificates, keys, and secretes.</li><li>Implement application security strategies including app registration, managed identities, and service endpoints.</li><li>Implement storage security strategies including shared access signatures, blob retention policies, and Azure Files authentication.</li><li>Implement database security strategies including authentication, data classification, dynamic data masking, and always encrypted.</li><li>Implement Azure Monitor including connected sources, log analytics, and alerts.</li><li>Implement Azure Security Center including policies, recommendations, and just in time virtual machine access.</li><li>Implement Azure Sentinel including workbooks, incidents, and playbooks.</li></ul><p>Successful learners will have prior knowledge and understanding of:</p> <ul> <li>Security best practices and industry security requirements such as defense in depth, least privileged access, role-based access control, multi-factor authentication, shared responsibility, and zero trust model.</li><li>Be familiar with security protocols such as Virtual Private Networks (VPN), Internet Security Protocol (IPSec), Secure Socket Layer (SSL), disk and data encryption methods.</li><li>Have some experience deploying Azure workloads. This course does not cover the basics of Azure administration, instead the course content builds on that knowledge by adding security specific information.</li><li>Have experience with Windows and Linux operating systems and scripting languages. Course labs may use PowerShell and the CLI.</li></ul><p>Prior attendance of the course <a class="fl-href-prod" href="/mcpp/course/microsoft-az-104t00">Microsoft Azure Administrator <span class="fl-prod-pcode">(AZ-104T00)</span></a> is recommended.</p><p>This course is for Azure Security Engineers who are planning to take the associated certification exam, or who are performing security tasks in their day-to-day job. This course would also be helpful to an engineer that wants to specialize in providing security for Azure-based digital platforms and play an integral role in protecting an organization s data.</p><h4>Protect identity and access in Azure</h4><ul> <li>Manage security controls for identity and access</li><li>Manage Microsoft Entra application access</li></ul> <h4>Protect network infrastructure in Azure</h4><ul> <li>Plan and implement security for virtual networks</li><li>Plan and implement security for private access to Azure resources</li><li>Plan and implement security for public access to Azure resources</li></ul> <h4>Protect compute, storage, and databases</h4><ul> <li>Plan and implement advanced security for compute</li><li>Plan and implement security for storage</li><li>Plan and implement security for Azure SQL Database and Azure SQL Managed Instance</li></ul> <h4>Strengthen security posture using Microsoft Defender for Cloud and Microsoft Sentinel</h4><ul> <li>Implement and manage enforcement of cloud governance policies</li><li>Manage security posture by using Microsoft Defender for Cloud</li><li>Configure and manage threat protection by using Microsoft Defender for Cloud</li><li>Configure and manage security monitoring and automation solutions</li></ul>- Implement enterprise governance strategies including role-based access control, Azure policies, and resource locks. - Implement an Azure AD infrastructure including users, groups, and multi-factor authentication. - Implement Azure AD Identity Protection including risk policies, conditional access, and access reviews. - Implement Azure AD Privileged Identity Management including Azure AD roles and Azure resources. - Implement Azure AD Connect including authentication methods and on-premises directory synchronization. - Implement perimeter security strategies including Azure Firewall. - Implement network security strategies including Network Security Groups and Application Security Groups. - Implement host security strategies including endpoint protection, remote access management, update management, and disk encryption. - Implement container security strategies including Azure Container Instances, Azure Container Registry, and Azure Kubernetes. - Implement Azure Key Vault including certificates, keys, and secretes. - Implement application security strategies including app registration, managed identities, and service endpoints. - Implement storage security strategies including shared access signatures, blob retention policies, and Azure Files authentication. - Implement database security strategies including authentication, data classification, dynamic data masking, and always encrypted. - Implement Azure Monitor including connected sources, log analytics, and alerts. - Implement Azure Security Center including policies, recommendations, and just in time virtual machine access. - Implement Azure Sentinel including workbooks, incidents, and playbooks.Successful learners will have prior knowledge and understanding of: - Security best practices and industry security requirements such as defense in depth, least privileged access, role-based access control, multi-factor authentication, shared responsibility, and zero trust model. - Be familiar with security protocols such as Virtual Private Networks (VPN), Internet Security Protocol (IPSec), Secure Socket Layer (SSL), disk and data encryption methods. - Have some experience deploying Azure workloads. This course does not cover the basics of Azure administration, instead the course content builds on that knowledge by adding security specific information. - Have experience with Windows and Linux operating systems and scripting languages. Course labs may use PowerShell and the CLI. Prior attendance of the course Microsoft Azure Administrator (AZ-104T00) is recommended.This course is for Azure Security Engineers who are planning to take the associated certification exam, or who are performing security tasks in their day-to-day job. This course would also be helpful to an engineer that wants to specialize in providing security for Azure-based digital platforms and play an integral role in protecting an organization s data.Protect identity and access in Azure - Manage security controls for identity and access - Manage Microsoft Entra application access Protect network infrastructure in Azure - Plan and implement security for virtual networks - Plan and implement security for private access to Azure resources - Plan and implement security for public access to Azure resources Protect compute, storage, and databases - Plan and implement advanced security for compute - Plan and implement security for storage - Plan and implement security for Azure SQL Database and Azure SQL Managed Instance Strengthen security posture using Microsoft Defender for Cloud and Microsoft Sentinel - Implement and manage enforcement of cloud governance policies - Manage security posture by using Microsoft Defender for Cloud - Configure and manage threat protection by using Microsoft Defender for Cloud - Configure and manage security monitoring and automation solutions4 days2590.001690.001500.002590.001200.003400.008990.001000.001000.001000.001499.001919.002395.001995.002590.002595.002595.002610.0065600.003380.001995.002590.002950.00