From the course: Microsoft Azure Security Technology (AZ-500) Cert Prep by Microsoft Press
Join today to access over 25,500 courses taught by industry experts.
Learning objectives - Azure Tutorial
From the course: Microsoft Azure Security Technology (AZ-500) Cert Prep by Microsoft Press
Learning objectives
“
- Welcome to Lesson 7: Plan and Implement Security for Public Access to Azure Resources. In this lesson, you'll learn how to defend your internet facing services. We'll start with Transport Layer Security, TLS, then deploy and manage Azure Firewall and Application Gateway. You'll also configure Front Door with CDN, deploy Web Application Firewalls and understand DDoS Protection Standard. Let's begin.
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.
Watch this course anytime, anywhere.
Get started with a free trial today.
Contents
-
-
(Locked)
Learning objectives40s
-
(Locked)
Configure Microsoft Entra verified ID2m 25s
-
(Locked)
Implement multifactor authentication (MFA)2m 54s
-
(Locked)
Implement passwordless authentication1m 59s
-
(Locked)
Implement password protection1m 58s
-
(Locked)
Implement single sign-on (SSO)3m 2s
-
(Locked)
Integrate single sign-on (SSO) and identity providers2m 11s
-
(Locked)
Recommend and enforce modern authentication protocols18m 15s
-
(Locked)
-
-
(Locked)
Learning objectives33s
-
(Locked)
Configure Azure role permissions for management groups, subscriptions, resource groups, and resources3m 20s
-
(Locked)
Assign Microsoft Entra built-in roles1m 29s
-
(Locked)
Assign Azure built-in roles2m 33s
-
(Locked)
Create and assign custom roles, including Azure roles and Microsoft Entra roles1m 30s
-
(Locked)
Implement and manage Microsoft Entra permissions management2m 7s
-
(Locked)
Configure Microsoft Entra privileged identity management3m 3s
-
(Locked)
Configure role management and access reviews in Microsoft Entra1m 57s
-
(Locked)
Implement conditional access policies19m 22s
-
(Locked)
-
-
(Locked)
Learning objectives37s
-
(Locked)
Manage access to enterprise applications in Microsoft Entra ID, including OAuth permission grants2m 27s
-
(Locked)
Manage Microsoft Entra app registrations1m 49s
-
(Locked)
Configure app registration permission scopes3m 3s
-
(Locked)
Manage app registration permission consent1m 1s
-
(Locked)
Manage and use service principals1m 45s
-
(Locked)
Manage managed identities for Azure resources3m 32s
-
(Locked)
Recommend when to use and configure a Microsoft Entra application proxy, including authentication14m 3s
-
(Locked)
-
-
(Locked)
Learning objectives34s
-
(Locked)
Plan and implement network security groups (NSGs) and application security groups (ASGs)2m 39s
-
(Locked)
Plan and implement user-defined routes (UDRs)1m 37s
-
(Locked)
Plan and implement virtual network peering or VPN gateway1m 47s
-
(Locked)
Plan and implement virtual WAN, including secured virtual hub58s
-
(Locked)
Secure VPN connectivity, including point-to-site and site-to-site3m 9s
-
(Locked)
Implement encryption over ExpressRoute1m 33s
-
(Locked)
Configure firewall settings on PaaS resources1m 35s
-
(Locked)
Monitor network security using network watcher, including NSG flow logging21m 41s
-
(Locked)
-
-
(Locked)
Learning objectives30s
-
(Locked)
Plan and implement virtual network service endpoints1m 53s
-
(Locked)
Plan and implement private endpoints1m 41s
-
(Locked)
Plan and implement private link services1m 1s
-
(Locked)
Plan and implement network integration for Azure App Service and Azure Functions1m 9s
-
(Locked)
Plan and implement network security configurations for an App Service Environment (ASE)1m 58s
-
(Locked)
Plan and implement network security configurations for an Azure SQL Managed Instance22m 43s
-
(Locked)
-
-
(Locked)
Learning objectives36s
-
(Locked)
Plan and implement transport layer security (TLS) to applications, including Azure App Service and Azure API Management1m 47s
-
(Locked)
Plan, implement, and manage an Azure firewall, including Azure Firewall Manager and firewall policies1m 45s
-
(Locked)
Plan and implement an Azure Application Gateway1m 19s
-
(Locked)
Plan and implement an Azure Front Door, including content delivery network (CDN)1m 45s
-
(Locked)
Plan and implement a web application firewall (WAF)1m 17s
-
(Locked)
Recommend when to use Azure DDoS Protection standard28m 25s
-
(Locked)
-
-
(Locked)
Learning objectives33s
-
(Locked)
Plan and implement remote access to public endpoints, including Azure Bastion and JIT VM access2m 16s
-
(Locked)
Configure network isolation for Azure Kubernetes Service (AKS)1m 40s
-
(Locked)
Secure and monitor AKS2m 35s
-
(Locked)
Configure authentication for AKS1m 12s
-
(Locked)
Configure security monitoring for Azure Container Instances (ACIs)1m 31s
-
(Locked)
Configure security monitoring for Azure Container Apps (ACAs)1m 37s
-
(Locked)
Manage access to Azure Container Registry (ACR)1m 3s
-
(Locked)
Configure disk encryption, including Azure Disk Encryption (ADE), encryption as host, and confidential disk encryption2m 47s
-
(Locked)
Recommend security configurations for Azure API Management20m 4s
-
(Locked)
-
-
(Locked)
Learning objectives31s
-
(Locked)
Configure access control for storage accounts1m 26s
-
(Locked)
Manage the lifecycle for storage account access keys2m 4s
-
(Locked)
Select and configure an appropriate method for access to Azure Files1m 2s
-
(Locked)
Select and configure an appropriate method for access to Azure Blob storage1m 9s
-
(Locked)
Select and configure an appropriate method for access to Azure Table storage1m 11s
-
(Locked)
Select and configure an appropriate method for access to Azure Queue Storage1m 12s
-
(Locked)
Select and configure appropriate methods for protecting against data security threats1m 41s
-
(Locked)
Configure bring your own key (BYOK)1m 8s
-
(Locked)
Enable double encryption at the Azure storage infrastructure level16m 57s
-
(Locked)
-
-
(Locked)
Learning objectives30s
-
(Locked)
Enable Microsoft Entra database authentication55s
-
(Locked)
Enable database auditing1m 6s
-
(Locked)
Identify use cases for the Microsoft Purview governance portal1m 6s
-
(Locked)
Implement data classification of sensitive information using the Microsoft Purview governance portal1m 40s
-
(Locked)
Plan and implement dynamic masking1m 26s
-
(Locked)
Implement transparent database encryption (TDE)59s
-
(Locked)
Recommend when to use Azure SQL database always encrypted25m 43s
-
(Locked)
-
-
(Locked)
Learning objectives37s
-
(Locked)
Create, assign, and interpret security policies and initiatives in Azure Policy2m 9s
-
(Locked)
Configure security settings using Azure Blueprints1m 57s
-
(Locked)
Deploy secure infrastructures using a landing zone1m 34s
-
(Locked)
Create and configure an Azure Key Vault1m 7s
-
(Locked)
Recommend when to use a dedicated hardware security module (HSM)2m 7s
-
(Locked)
Configure access to Key Vault, including vault access policies and Azure role-based access control1m 26s
-
(Locked)
Manage certificates, secrets, and keys1m
-
(Locked)
Configure key rotation1m 32s
-
(Locked)
Configure backup and recovery of certificates, secrets, and keys20m 22s
-
(Locked)
-
-
(Locked)
Learning objectives29s
-
(Locked)
Identify and remediate security risks by using the Microsoft Defender for Cloud secure score and inventory2m 11s
-
(Locked)
Assess compliance against security frameworks and Microsoft Defender for cloud1m 20s
-
(Locked)
Add industry and regulatory standards to Microsoft Defender for Cloud57s
-
(Locked)
Add custom initiatives to Microsoft Defender for cloud50s
-
(Locked)
Connect hybrid cloud and multi-cloud environments to Microsoft Defender for cloud1m 39s
-
(Locked)
Identify and monitor external assets by using Microsoft Defender external attack surface management19m 40s
-
(Locked)
-
-
(Locked)
Learning objectives34s
-
(Locked)
Enable workload protection services1m 57s
-
(Locked)
Configure Microsoft Defender for Servers2m 3s
-
(Locked)
Configure Microsoft Defender for Azure SQL1m 28s
-
(Locked)
Manage and respond to security alerts in Microsoft Defender for Cloud2m 27s
-
(Locked)
Configure workflow automation using Microsoft Defender for Cloud2m 23s
-
(Locked)
Evaluate vulnerability scans from Microsoft Defender for Servers16m 52s
-
(Locked)
-
-
(Locked)
Learning objectives41s
-
(Locked)
Monitor security events using Azure Monitor1m 16s
-
(Locked)
Configure data connectors in Microsoft Sentinel2m 2s
-
(Locked)
Create and customize analytics rules in Microsoft Sentinel1m 21s
-
(Locked)
Evaluate alerts and incidents in Microsoft Sentinel1m 39s
-
(Locked)
Configure automation in Microsoft Sentinel10m 33s
-
(Locked)