Advanced Microsoft Azure Administrator & Security Technologies

Overview:

Introduction

Microsoft Azure administrator often serves as part of a larger team dedicated to implementing an organization's cloud infrastructure. Azure administrators also coordinate with other roles to deliver Azure networking, security, database, application development, and DevOps solutions.

This course provides IT Security Professionals with the knowledge and skills needed to implement security controls, maintain an organization’s security posture, and identify and remediate security vulnerabilities. This course includes security for identity and access, platform protection, data and applications, and security operations.

Course Objectives

At the end of this course the participants will be able to:

• Define Microsoft Azure AD concepts, including identities, accounts, and tenants.
• Describe Microsoft Azure AD features to support different configurations.
• Understand the differences between Azure AD and Active Directory Domain Services (AD DS).
• Choose between supported editions of Azure AD.
• Manage Azure identity and access
• Implement Azure platform protection
• Manage Azure security operations
• Secure data and applications on Azure
• Manage resource group security
• Configure vulnerability scanning
• Configure subscription and resource permissions
• Implement the Microsoft Azure AD join feature.
• Use the Azure Microsoft AD self-service password reset feature.

Targeted Audience

• Manage identities and governance in Azure
• Microsoft  Experts
• Engineers who are planning to take the associated certification exam, or who are performing security tasks in their day-to-day job
• An engineer that wants to specialize in providing security for Azure-based digital platforms and play an integral role in protecting an organization's data.
• IT professionals who want to become Azure Security Engineers
• IT professionals preparing for Microsoft’s AZ-500 exam
• Manage Azure Active Directory objects

Course Outline

Unit 1: Configure Azure Active Directory

• Define Azure AD concepts, including identities, accounts, and tenants.
• Describe Azure AD features to support different configurations.
• Understand the differences between Azure AD and Active Directory Domain Services (AD DS).
• Choose between supported editions of Azure AD.
• Implement the Azure AD join feature.
• Use the Azure AD self-service password reset feature.

Unit 2: Configure user and group accounts

• Configure users' accounts and user account properties.
• Create new user accounts.
• Import bulk user accounts with a template.
• Configure group accounts and assignment types.

Unit 3: Configure subscriptions

• Determine the correct region to locate Microsoft Azure services.
• Review features and use cases for Microsoft Azure subscriptions.
• Obtain an Azure subscription.
• Understand billing and features for different Azure subscriptions.
• Use Microsoft Cost Management for cost analysis.
• Discover when to use Microsoft Azure resource tagging.
• Identify ways to reduce costs.

Unit 4: Configure Azure Policy

• Create management groups to target policies and spending budgets.
• Implement Microsoft Azure Policy with policy and initiative definitions.
• Scope Azure policies and determine compliance.

Unit 5: Configure role-based access control

• Identify features and use cases for role-based access control.
• List and create role definitions.
• Create role assignments.
• Identify differences between Microsoft Azure RBAC and Azure Active Directory roles.
• Manage access to subscriptions with RBAC.
• Review built-in Azure RBAC roles.

Unit 6:

• Introduction
• Microsoft Azure Defence in Depth – All credits to Microsoft
• How to Set up Free LAB
• Azure Free Trail - How to get a free Trail

Unit 7:

• Azure Active Directory
• AAD Connect
• Manage Azure Identity and access
• Configuring Azure Active Directory for Workloads
• Authentication Options - Choose the Right Authentication Method For your Azure
• Multi-Factor Authentication

Unit 8:

• Azure Active Directory Privilege Identity Management
• Transfer Billing ownership of an Azure subscription
• Azure Key Vault
• Platform Protection
• Azure Virtual Network (VNet)
• Network Security Groups (NSGs)

Unit 9:

• Security Update for Azure Services and VMs
• Securing Azure Resources
• Azure Container Security
• Create Azure Container Registry -CLI and Portal
• Azure Monitoring
• Create Log Analytics Workspace -Work with Log Search

Unit 10:

• Security for Data Infrastructure, SQL, Storage
• Secure Data and Applications
• Implementing Security Validations for Application Development
• Set up availability tests for any HTTP or HTTPS endpoint - Synthetic Security