Azure security engineers often serve as part of a larger team to plan and implement cloud-based management and security. Candidates for this exam should have practical experience in administration of Azure and hybrid environments. Candidates should have experience with infrastructure as code, security operations processes, cloud capabilities, and Azure services. This course provides IT Security Professionals with the knowledge and skills needed to implement security controls, maintain an organization’s security posture, and identify and remediate security vulnerabilities. This course includes security for identity and access, platform protection, data and applications, and security operations.

This exam measures your ability to accomplish the following technical tasks: manage identity and access; implement platform protection; manage security operations; and secure data and applications.

Required Exam: AZ 500

Target Audience

• Implementation Engineer
• Azure Consultant
• Cyber Security Analyst
• Cloud Security Engineer
• Design Sales Engineer, Microsoft Security
• Solution Sales Specialist
• Microsoft Security Administrator Associate

Prerequisites

Security best practices and industry security requirements such as defense in depth, least privileged access, role-based access control, multi-factor authentication, shared responsibility, and zero trust model.
Be familiar with security protocols such as Virtual Private Networks (VPN), Internet Security Protocol (IPsec), Secure Socket Layer (SSL), disk and data encryption methods.
Have some experience deploying Azure workloads. This course does not cover the basics of Azure administration, instead the course content builds on that knowledge by adding security specific information.
Have experience with Windows and Linux operating systems and scripting languages. Course labs may use PowerShell and the CLI.
Prerequisite courses (or equivalent knowledge and hands-on experience).

• Implement enterprise governance strategies including role-based access control, Azure policies, and resource locks.
• Implement an Azure AD infrastructure including users, groups, and multi-factor authentication.
• Implement Azure AD Identity Protection including risk policies, conditional access, and access reviews.
• Implement perimeter security strategies including Azure Firewall.
• Implement network security strategies including Network Security Groups and Application Security Groups.
• Implement host security strategies including endpoint protection, remote access management, update management, and disk encryption.