AZ-1003: Secure storage for Azure Files and Azure Blob Storage

Course AZ-1003: Secure storage for Azure Files and Azure Blob Storage

To earn this Microsoft Applied Skills credential, learners must demonstrate the ability to securely store enterprise data using Azure Blob Storage and Azure Files. Candidates for this credential should be familiar with Azure services, storage, networking, and virtual machine concepts.

Intermediate - Azure, Azure Blob Storage - Administrator - Storage

Objectives of the AZ-1003 training

• Creating and configuring a storage account
• Creating and configuring Blob Storage
• Creating and configuring Azure Files
• Encryption settings
• Configure networks for storage

Course content AZ-1003

Module 1 Creating an Azure Storage Account

• Determining the number of storage accounts needed
• Account settings selection
• Choosing an account creation tool
• Exercise: Creating a storage account using the Azure Portal

Module 2 Azure Blob Storage Configuration

• Azure Blob Storage Implementation
• Creating blob containers
• Blob access level assignment
• Addition of blob lifecycle management rules
• Determining blob object replication
• Load blobs
• Determining Blob Storage Prices
• Interactive laboratory simulation

Module 3: Configuring Azure Storage Security

• Review of Azure Storage security strategies
• Creating shared access signatures
• Identification of URI and SAS parameters
• Azure Storage Encryption Determination
• Creation of customer-managed keys
• Apply best practices for Azure Storage security
• Interactive laboratory simulation

Module 4 Implementation of storage security

• Definition of data sovereignty
• Azure Storage access settings
• Implementation of shared access signatures
• Microsoft Storage Authentication Management Login
• Implementation of storage service encryption
• Configuring blob data retention policies
• Configuring Azure Files authentication
• Enabling the mandatory secure transfer property

Module 5: Protecting and isolating access to Azure resources using network security groups and service endpoints

• Using network security groups to control network access
• Exercise: Creating and managing network security groups
• Protecting network access to PaaS services through virtual network service endpoints
• Exercise: Restricting access to Azure Storage using service endpoints

Module 6 Guided Project: Azure Files and Azure Blobs

• Exercise: Provision of storage for IT department testing and training
• Exercise: Provision of storage for the public website. Exercise: Provision of private storage for internal company documents.
• Exercise: Provision of shared file storage for the company's offices
• Exercise: Provisioning storage for a new enterprise application

Prerequisites

Candidates for this credential must be familiar with the concepts of Azure services, storage, networking, and virtual machines.

Language

• Course: English / Spanish
• Labs: English / Spanish

Microsoft Applied Skills

This course is part of the Microsoft Applied Skills Credentials.

To earn this Microsoft Applied Skills credential, students must demonstrate the ability to securely store business data using Azure Blob Storage and Azure Files.

Applied Skills: Explore all credentials in one guide