SC-5002: Secure Azure services and workloads with Microsoft Defender for Cloud regulatory compliance controls

• Microsoft Defender for Cloud Configuration
• Implementing Just-In-Time (JIT) Virtual Machine Access
• Create a Log Analytics Workspace
• Mitigating network security risks
• Mitigating data protection risks
• Mitigating Endpoint Security Risks
• Mitigating position management risks and vulnerabilities

Protect Azure services and workloads with Microsoft Defender for Cloud compliance controls

• Defender for Cloud Compliance Standards Review: In this module, we will focus on using Microsoft Defender for Cloud to simplify regulatory compliance by identifying and resolving issues that hinder compliance with compliance standards and certifications.
• Enabling Defender for Cloud in an Azure Subscription: In this module, we will focus on enabling Microsoft Defender for Cloud in your Azure subscription to enhance security monitoring, compliance management, and threat protection for cloud-based applications.
• Filtering network traffic using a Network Security Group using Azure portal: In this module, we will focus on filtering network traffic using Network Security Groups in the Azure portal. Learn how to create, configure, and apply Network Security Groups to enhance network security.
• Create a Log Analytics workspace for Microsoft Defender for Cloud: In this module, you will learn how to create a Log Analytics workspace in the Azure portal for Microsoft Defender for Cloud to improve data collection and security analysis.
• Configuring and integrating a Log Analytics agent and workspace in Defender for Cloud: This module will guide you through configuring and integrating a Log Analytics agent with a workspace in Defender for Cloud using the Azure portal to enhance security analytics.
• Exploring JIT access to the virtual machine: In this module, we will focus on the risk of open management ports on virtual machines and how JIT VM access in Microsoft Defender for Cloud mitigates this threat.
• Configure Azure Key Vault networking: In this module, you will learn how to configure Azure Key Vault networking settings using the Azure portal to ensure secure and controlled access to stored secrets.
• Connecting to an Azure SQL Server using Azure Private Endpoint via Azure Portal: This module will guide you in securely connecting an Azure SQL Server using Azure Private Endpoint in Azure Portal, which enhances the security of data communication.

Familiarity with Azure Infrastructure as a Service (IaaS) and Platform as a Service (PaaS) is recommended. Experience with security capabilities in Azure, along with a working knowledge of regulatory compliance standards.

• Course: English / Spanish
  
• Labs: English / Spanish

This course is part of the Microsoft Applied Skills Credentials.

To earn this Microsoft Applied Skills credential, learners must demonstrate their ability to implement regulatory compliance controls as recommended by the Microsoft Cloud Security Benchmark.

Applied Skills: Explore all credentials in one guide