This course provides IT Security Professionals with the knowledge and skills needed to implement security controls, maintain an organization’s security posture, and continuously identify and remediate vulnerabilities by using a variety of security tools. It focuses on securing identity, platforms, data, applications, and operations in Azure. The training aligns with the Microsoft Certified: Azure Security Engineer Associate certification exam (AZ-500)
Course Outline
Module 1: Secure Identity and Access
Lessons
o Manage Azure built-in role assignments
o Manage custom roles, including Azure roles and Microsoft Entra roles
o Plan and manage Azure resources in Microsoft Entra Privileged Identity Management (PIM), including settings and assignments
o Implement multi-factor authentication (MFA) for access to Azure resources
o Implement Conditional Access policies for cloud resources in Azure
o Manage access to enterprise applications in Microsoft Entra ID, including OAuth permission grants
o Manage Microsoft Entra app registrations
o Configure app registration permission scopes
o Manage app registration permission consent
o Manage and use service principals
o Manage managed identities
Labs
Module 2: Secure Networking
Lessons
o Plan and implement Network Security Groups (NSGs) and Application Security Groups (ASGs)
o Manage virtual networks by using Azure Virtual Network Manager
o Plan and implement user defined routes (UDRs)
o Plan and implement Virtual Network peering or VPN gateway
o Plan and implement Virtual WAN, including secured virtual hub
o Secure VPN connectivity, including point-to-site and site to-site
o Implement encryption over ExpressRoute
o Configure firewall settings on Azure resources
o Monitor network security by using Network Watcher
o Plan and implement virtual network Service Endpoints
o Plan and implement Private Endpoints
o Plan and implement Private Link services
o Plan and implement network integration for Azure App Service and Azure Functions
o Plan and implement network security configurations for an App Service Environment (ASE)
o Plan and implement network security configurations for an Azure SQL Managed Instance
o Plan and implement Transport Layer Security (TLS) to applications, including Azure App Service and API Management
o Plan, implement, and manage an Azure Firewall, including Azure Firewall Manager and firewall policies
o Plan and implement an Azure Application Gateway
o Plan and implement an Azure Front Door, including Content Delivery Network (CDN)
o Plan and implement a Web Application Firewall (WAF)
o Recommend when to use Azure DDoS Protection Standard
Labs
Module 3: Secure Compute, Storage, and Databases
Lessons
o Plan and implement remote access to virtual machines, including Azure Bastion and just-in-time (JIT)
o Configure network isolation for Azure Kubernetes Service (AKS)
o Secure and monitor AKS
o Configure authentication for AKS
o Configure security monitoring for Azure Container Instances (ACIs)
o Configure security monitoring for Azure Container Apps (ACAs)
o Manage access to Azure Container Registry (ACR)
o Configure disk encryption, including Azure Disk Encryption (ADE), encryption at host, and confidential disk encryption
o Recommend security configurations for Azure API Management
o Configure access control for storage accounts
o Manage storage account access keys
o Select and configure an appropriate method for access to Azure Files
o Select and configure an appropriate method for access to Azure Blob Storage
o Select and configure appropriate methods for protecting against data security threats, including soft delete, backups, versioning, and immutable storage
o Configure Bring your own key (BYOK)
o Enable double encryption at the Azure Storage infrastructure level
o Enable Microsoft Entra database authentication
o Enable database auditing
o Plan and implement dynamic data masking
o Implement Transparent Data Encryption (TDE)
o Recommend when to use Azure SQL Database Always Encrypted
Labs
Module 4: Secure Data and Applications
Lessons
o Configure security policies to manage data
o Configure security for data infrastructure Configure encryption for data at rest and in transit
o Understand application security concepts
o Implement security for application lifecycle (development, deployment,
operations)
o Secure applications using Azure security features, including endpoint security
o Configure and manage Azure Key Vault for secrets management
o Configure Microsoft Defender for Cloud for data and app protection
o Implement threat protection and vulnerability management
Labs
Module 5: Manage Security Operations
Lessons
o Configure Microsoft Defender for Cloud
o Configure security policies using Azure Policy and Blueprints
o Manage security alerts and recommendations
o Respond to and remediate security issues using Defender
for Cloud
o Develop regulatory compliance baselines
o Configure workflow automation for compliance
Labs
It’s not magic; it’s the right study resources. Forget the guesswork and the old textbooks. This section holds our battle-tested arsenal of notes, practice exams, and exclusive guides. Click through and see how we turn confusion into clarity.
Cloud Security Administrator
Security Operations Center Engineer
Threat Detection Analyst
Ethical Hacker (Azure)
Red Team Engineer
Text Us
