Azure Cloud Security Basic to Advanced

• Basic knowledge of cloud computing
• Knowledge of Microsoft Azure

Audience

• Security administrators

Azure is a cloud computing service platform by Microsoft that offers a wide collection of services to access and manage cloud resources and services.

This instructor-led, live training (online or onsite) is aimed at security administrators who wish to learn how to configure Azure cloud security to secure workloads running in Azure.

By the end of this training, participants will be able to:

• Configure host and network security.
• Configure Azure advanced security options.
• Use Azure to secure cloud computing workloads.
• Use endpoint protection services security against malware and viruses.
• Secure container workloads that are running in Azure.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

Introduction

• Overview of Azure security
• Cloud computing basics

Fundamentals of Azure

• Understanding Azure basics
• Getting started with Azure

Configuring Host-level Security

• Understanding storage account security
• Data plane security
• Understanding encryption (in transit and at rest)
• Storage analytics
• Azure storage explorer
• Configuring Azure storage account security
• Protecting the VM OS environment
• Securing a VM during deployment

Configuring Deployment-level Security

• Understanding network security group
• Load balancer and NAT
• Using forced tunneling and network security appliances
• Configuring Azure load balancer
• Configuring NSG
• Understanding role-based access control (RBAC)
• Azure Resource Manager (ARM) policies
• Testing role-based access control
• Testing ARM policies

Configuring Azure Security Center

• Understanding Azure Security Center (ASC)
• Configuring ASC
• Inspecting ASC security
• Reviewing security alerts and incidents

Configuring VM Monitoring

• VM update management
• Configuring VM update automation
• Azure Automation Desired State Configuration (DSC)

Configuring VM Endpoint Protection

• Azure VM endpoint protection
• Deploying endpoint protection
• Azure VM vulnerability management

Configuring Azure App Services Authentication and Security

• Azure app service security
• Implementing Azure app services security

Configuring Azure Containers Authentication and Security

• Azure container registry and Kubernetes services authentication
• Deploying container registry and Azure Kubernetes service
• Azure Kubernetes service authentication

Configuring Azure Kubernetes Service Security

• Azure Kubernetes service and Azure container registry security
• Azure Kubernetes service isolation

Troubleshooting

Summary and Next Steps