Course outline

Module 1: Identity and Access
• Azure Active Directory
• Hybrid Identity
• Azure Identity Protection
• Azure AD Privileged Identity Management
• Enterprise Governance
Lab : Role-Based Access Control
Lab: Azure Policy
Lab: Resource Manager Locks
Lab: MFA, Conditional Access and AAD Identity Protection
Lab: Azure AD Privileged Identity Management
Lab: Implement Directory Synchronization

Module 2: Platform Protection
• Understand cloud security
• Build a network
• Secure network
• Implement host security
• Implement platform security
• Implement subscription security
Lab: Configuring and Securing ACR and AKS
Lab: Azure Firewall
Lab: Network Security Groups and Application Security Groups
After completing this module, students will be able to:
• Implement perimeter security strategies including Azure Firewall.
• Implement network security strategies including Network Security Groups and Application Security Groups.
• Implement host security strategies including endpoint protection, remote access management, update management, and disk encryption.
• Implement container security strategies including Azure Container Instances, Azure Container Registry, and Azure Kubernetes.

Module 3: Security Operations
• Configure security services
• Configure security policies by using Azure Security Center
• Manage security alerts
• Respond to and remediate security issues
• Create security baselines
Lab: Key Vault (Implementing Secure Data by setting up Always Encrypted)
Lab: Securing Azure SQL Database
Lab: Service Endpoints and Securing Storage
After completing this module, students will be able to:
Implement Azure Key Vault including certificates, keys, and secretes.
• Implement application security strategies including app registration, managed identities, and service endpoints.
• Implement storage security strategies including shared access signatures, blob retention policies, and Azure Files authentication.
• Implement database security strategies including authentication, data classification, dynamic data masking, and always encrypted.

Module 4: Data and applications
• Configure security policies to manage data
• Configure security for data infrastructure
• Configure encryption for data at rest
• Understand application security
• Implement security for application lifecycle
• Secure applications
• Configure and manage Azure Key Vault
Lab: Azure Sentinel
Lab: Azure Security Center
Lab: Azure Monitor
After completing this module, students will be able to:
• Implement Azure Monitor including connected sources, log analytics, and alerts.
• Implement Azure Security Center including policies, recommendations, and just in time virtual machine access.
• Implement Azure Sentinel including workbooks, incidents, and playbooks