- This module is designed to provide administrators with the knowledge and skills needed to plan and implement advanced security measures for Azure compute resources, safeguarding applications and data against evolving security threats.
By the end of this module, participants will be able to:
Enhance Azure compute resources' security against vulnerabilities and attacks with advanced measures.
Secure remote access via Azure Bastion (Developer, Basic, Standard, and Premium SKUs) and Just-in-Time (JIT) VM access, and implement network isolation for AKS.
Configure AKS authentication using workload identity and Microsoft Entra ID, strengthen AKS clusters' security, monitor Azure Container Instances and Apps, and manage access to Azure Container Registry.
Implement disk encryption methods like ADE and encryption at host, and manage API access securely in Azure API Management.
- This module is designed to provide administrators with the knowledge and skills required to plan and implement comprehensive security measures for Azure storage resources, safeguarding data integrity, confidentiality, and availability.
By the end of this module, participants will be able to:
Develop security strategies for Azure storage resources, ensuring data protection during rest and transit.
Manage storage account access with effective access control and secure key lifecycle management.
Tailor access methods for Azure Files, Blob Storage, Tables, and Queues to specific use cases.
Strengthen data security with soft delete, backups, versioning, immutable storage, BYOK, and double encryption.
- This module is designed to empower administrators with the knowledge and skills needed to plan and implement robust security measures for Azure SQL Database and Azure SQL Managed Instance, ensuring data protection and regulatory compliance.
By the end of this module, participants will be able to:
Implement security for Azure SQL Managed Instance to safeguard sensitive data.
Use Microsoft Enterprise Identity for database authentication and conduct database auditing for compliance.
Utilize Microsoft Purview for data governance and classification to protect sensitive information.
Apply dynamic masking and Transparent Database Encryption, and recommend Always Encrypted for client-side data protection.
