|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/a-to-z-of-azure-security-covers-az-500-and-more/
课程评论：没有评论
《A to Z of Azure Security》课程概述 本课程旨在全面涵盖与Azure安全相关的技能，以满足微软认证考试AZ-500、AZ-300和AZ-103的要求。随着许多财富500强公司将其本地工作负载迁移到Azure，确保这些工作负载的安全性变得尤为重要。市场对Azure安全专家的需求日益增长，本课程专为提升您在Azure安全方面的技能而设计，助您成为专家。 课程内容包括： 1. **Azure Active Directory**：介绍Azure Active Directory（AAD）；创建用户并配置默认用户设置；应用管理及支持的单点登录（SSO）；使用应用代理发布本地应用到My Apps门户；通过AD Connect同步本地AD到AAD。 2. **条件访问与设备管理**：配置基于位置的条件访问；设备管理概述；Azure AD身份保护和基于登录的条件访问配置。 3. **角色基于访问控制**：自定义角色的创建和分配；动态组的创建和分配；Azure AD应用注册和服务主体的创建；管理身份的创建与访问密钥库的整合。 4. **策略与锁定**：通过Azure门户管理策略和锁定的基础知识。 5. **特权身份管理**：启用特权身份管理（PIM），进行访问审核，保护AD及资源角色。 6. **网络安全**：介绍Azure网络安全控制，实施Azure防火墙及网络安全组（NSGs）。 7. **主机安全**：Azure IaaS最佳实践，实施虚拟机端点保护及更新管理方案。 8. **存储与数据库安全**：生成基于存储访问策略的SAS密钥，实施高级数据安全功能如数据分类和威胁检测。 9. **应用安全**：Azure应用服务安全配置，与AAD及SSL的认证。 10. **安全监控**：实现活动日志提醒和日志搜索提醒，监控解决方案的讲解。 11. **安全中心**：实施预防性监控和通过安全中心的修复措施。 本课程结合理论讲解和大量的动手演示，帮助您在Azure环境中提高工作负载的安全性。作为一个不断发展的平台，我们会定期更新课程内容以反映最新的Azure动态。 立即报名参与本课程，提升您的IT专业技能，获取更高的薪资！
This single course covers all the Azure security relate skills required for Microsoft certification exams AZ 500, AZ 300, AZ 103.Most of the fortune 500 companies are moving their on-premise workloads into Azure and it is increasingly imperative to secure the workloads in Azure. There is a great demand in job market for Azure security experts.This course is designed to build your skills in Azure security and make you an expert in the same.This course covers Azure security skills required for Microsoft Azure certification exam AZ 500 & security skills required for all other Microsoft Azure certifications.This course has been designed with an architectural approach. Firstly, I will take you through fundamental building blocks of Azure Security and after this introduction, I will take you through following aspects related to Azure Security.Azure Active Directory - Introduction to Azure Active directory(AAD); Create a use and configure default user settings; Introduction to Application management and supported SSO's; Walkthrough of My Apps portal and settings; Publish an on-premise app into My Apps portal using Application proxy and configure password based SSO; Introduction to AD connect and supported topologies; Synchronise identities from on-premise AD into AAD using AD connect.AAD conditional access and device management - Introduction to conditional based access; Configure location based conditional access; Introduction to device management; Configure device based conditional based access; Introduction to Azure AD Identity protection; Configure sign in based conditional access.Roles Based Access Control - Introduction to role based access control; Custom role creation and assignment; Dynamic groups creation and assignment; Introduction to Azure AD App registrations; Creation of service principle and access Azure resource; Introduction to Managed Identities; Creation of managed service identity & access key vault.Policies & Locks - Introduction to policies and locks and manage them using Azure Portal.Azure AD Privileged identity management - Introduction to Azure PIM; Enable PIM and carry out access reviews; Protect AD & Resource roles using PIM.Network security - Introduction to Azure Network security controls; Implement Azure firewall in Hub and Spoke model; Implement network security groups (NSGs) and Application security groups; Implement service end points and policies; Walkthrough of different options of remote access management and implement of Windows Admin Center.Host security - Introduction to Azure IaaS best practices; Implementing Azure VM endpoint protection using Microsoft Antimalware; Implementation of update management solution; Implementation of Azure Disk Encryption.Storage & Database security - Introduction to Azure storage security and Azure SQL database security; Generate SAS keys based on Stored Access policies and use them; Implement advanced data security capabilities such as data classification, vulnerabilities assessment, advanced threat detection and auditing; Implement always encrypted; Introduction to COSMOS DB security.Application security - Introduction to Azure App service security; Configure authentication with AAD and SSL for Azure App service; Introduction to App service deployment options; Publish an app into Azure DevOps using Visual studio; Enable continuous integration with Azure DevOps for Azure web app.Security monitoring - Introduction to Azure Monitor metrics, activity logs and logs; Implementation of Activity log alert and log search alerts; Implementation of log analytics workspace and feed activity logs, NSG flow logs, update management information etc; Walkthrough of different monitoring solutions such as anti malware assessment, activity log analytics, update management solution and traffic analytics. Security centre - Introduction to Azure security centre; Implement preventive monitoring and remediation using Security Centre; Implement Just in Time access; Implement and manage security alert integration with playbook (logic app).This course contains both theory lectures and a significant number of hands-on demos that helps you in gaining hands-on experience in hardening your workloads in Azure. Microsoft Azure is a constantly evolving platform and I will be keep close watch on Azure announcements and add new labs wherever possible.So, start taking this course and put yourself in high demand in the world of IT and command higher salary!!!
