AZ-500: Secure cloud resources with Microsoft security technologies

AZ-500 Course: Secure cloud resources with Microsoft security technologies

This course provides IT security professionals with the knowledge and skills needed to implement security controls, maintain an organization's security posture, and identify and remediate security vulnerabilities. This course includes identity and access security, platform, data, and application protection, and security operations.

Level: Intermediate - Product: Azure - Role: Security Engineer

Azure Cloud Security - Microsoft Security Technologies - Cloud Resource Protection - Identity Management - Access Control Data Encryption - Application Security - Compliance and Security

Course intended for

This course is intended for Azure security engineers who plan to take the associated certification exam or who perform security tasks in their daily work. This course would also be useful for an engineer who wants to specialize in providing security for Azure-based digital platforms and play an integral role in protecting an organization's data.

AZ-500 Course Objectives

• Implement security controls: You will learn how to configure and manage security controls to protect resources in Azure, including identity and access protection, platform, data, and application security.
• Maintain security posture: You will develop skills to maintain and improve your organization's security posture, ensuring that systems and data are protected against threats.
• Identify and remediate vulnerabilities: You will learn how to identify and remediate security vulnerabilities using tools such as Microsoft Defender for Cloud.
• Implement threat protection: You will configure and manage threat protection solutions to detect and respond to security incidents in Azure, multi-cloud, and hybrid environments.

Microsoft Learn AZ-500 Training Elements

• AZ-500: Identity and access protection (2 modules)
• AZ-500: Secure networks (3 modules)
• AZ-500: Secure process, storage, and databases (3 modules)
• AZ-500: Protecting Azure with Microsoft Defender for Cloud and Microsoft Sentinel (4 modules)

AZ-500 Course Content: Protecting Cloud Resources with Microsoft Security Technologies

Module 1. Manage identity and access

Lessons

• Managing security controls for identity and access
• Managing application access in Microsoft Entra

Lab 01: Role-based access control

After completing this module, students will be able to:

• Effectively manage identities with Microsoft Entra ID to ensure secure access and identity governance.
• Effectively manage authentication processes with Microsoft Entra ID to protect user access and verify identities.
• Implement and manage authorization configuration with Microsoft Entra ID to securely control access rights and permissions.
• Effectively manage and protect application access with Microsoft Entra ID to ensure proper user authorization and authentication.

Module 2. Network protection

Lessons

• Planning and implementing virtual network security
• Planning and implementing private access security to Azure resources
• Planning and implementing public access security to Azure resources

Lab 02: Network security groups and application security groups

Lab 03: Azure Firewall

After completing this module, students will be able to:

• Plan and implement security measures for virtual networks, covering NSGs, ASGs, UDRs, VNET peering, VPN Gateway instances, Virtual WAN, and network monitoring with Network Watcher.
• Establish private access to Azure resources using service endpoints, private endpoints, Private Link services, and secure configurations for App Service, Azure Functions, and Azure SQL Managed Instance.
• Implement security for public access to Azure, including TLS application integration, Azure Firewall, Application Gateway, Front Door, WAF, and recommendations for Azure DDoS Protection.

Module 3. Process, storage, and database protection

Lessons

• Planning and implementing advanced process security
• Planning and implementing storage security
• Planning and implementing Azure SQL Database and Azure SQL Managed Instance security

Lab 04: ACR and AKS configuration and protection

Lab 05: Protecting Azure SQL Database

Lab 06: Service endpoints and secure storage

After completing this module, students will be able to:

• Strengthen process security using Azure Bastion, AKS configurations, container monitoring, and advanced encryption techniques.
• Improve storage security with custom access controls, threat protection measures, and various encryption strategies.
• Strengthen Azure SQL Database protection using authentication, auditing, data classification, and advanced encryption recommendations.

Module 4. Protecting Azure with Microsoft Defender for Cloud and Microsoft Sentinel

Lessons

• Implementing and managing compliance with cloud governance policies
• Managing security posture with Microsoft Defender for Cloud
• Configuring and managing threat protection with Microsoft Defender for Cloud
• Configuring and managing security automation and monitoring solutions

Lab 07: Key vault

Lab 08: Creating a Log Analytics workspace, an Azure Storage account, and a data collection rule (DCR)

Lab 09: Configuring Microsoft Defender for Cloud advanced security features for servers

Lab 10: Enabling Just-In-Time access on virtual machines

Lab 11: Microsoft Sentinel

After completing this module, students will be able to:

• Implement security operations, establish governance, and implement Azure policies and infrastructures while protecting keys and certificates.
• Improve Defender security posture, ensure compliance, and monitor external threats.
• Configure Defender for various threats, manage alerts, and leverage Sentinel for advanced security strategies.

Prerequisites

Students who pass the test will have prior knowledge and understanding of:

• Recommended procedures and industry security requirements, such as defense in depth, least privilege access, role-based access control, multi-factor authentication, shared responsibility, and the zero trust model.
• Security protocols, such as virtual private networks (VPN), Internet Protocol Security (IPSec), Secure Sockets Layer (SSL), and disk and data encryption methods.
• Some experience implementing Azure workloads. This course does not cover the basics of Azure administration; instead, the content builds on that knowledge by adding security-specific information.
• Experience with Windows and Linux systems, as well as scripting languages.
• The course labs may use PowerShell and the CLI.

Language

• Course: English / Spanish
• Labs: English / Spanish

Microsoft Associate Certification: Azure Security Engineer Associate

Microsoft Certified: Azure Security Engineer Associate

Demonstrates the skills needed to implement security controls, maintain an organization's security posture, and identify and remediate security vulnerabilities.

Level: Intermediate
Role: Security Engineer
Product: Azure
Subject: Security