• Manage identity and access
• Implement platform protection
• Manage security operations
• Secure data and applications

Students should have at least one year of hands-on experience securing Azure workloads and experience with security controls for workloads on Azure.

Module 1: Manage Identity and Access

This module covers Azure Active Directory, Azure Identity Protection, Enterprise Governance, Azure AD PIM, and Hybrid Identity.

Lessons

• Azure Active Directory
• Azure Identity Protection
• Enterprise Governance
• Azure AD Privileged Identity Management
• Hybrid Identity

Lab: Role-Based Access Control
Lab: Azure Policy
Lab: Resource Manager Locks
Lab: MFA, Conditional Access and AAD Identity Protection
Lab: Azure AD Privileged Identity Management
Lab: Implement Directory Synchronization

Module 2: Implement Platform Protection

This module covers perimeter, network, host, and container security.

Lessons

• Perimeter Security
• Network Security
• Host Security
• Container Security

Lab: Network Security Groups and Application Security Groups
Lab: Azure Firewall
Lab: Configuring and Securing ACR and AKS

Module 3: Secure Data and Applications

This module covers the Azure Key Vault, application security, storage security, and SQL database security.

Lessons

• Azure Key Vault
• Application Security
• Storage Security
• SQL Database Security

Lab: Key Vault (Implementing Secure Data by setting up Always Encrypted)
Lab: Securing Azure SQL Database
Lab: Service Endpoints and Securing Storage

Module 4: Manage Security Operations

This module covers Azure Monitor, Azure Security Center, and Azure Sentinel.

Lessons

• Azure Monitor
• Azure Security Center
• Azure Sentinel

Lab: Azure Monitor
Lab: Azure Security Center
Lab: Azure Sentinel