|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/microsoft-365-cloud-security-administration-hands-on/
课程评论：没有评论
**Microsoft 365 云安全管理实操课程总结** 本课程名为“Microsoft 365 Cloud Security Administration - Hands On”，旨在为学员提供 Windows 365 云网络与安全管理的坚实基础，并通过实际操作进行教学。 **课程大纲：** * **第一部分：引言** * 介绍可用的 Microsoft 365 计划。 * 讲解基础云术语。 * **第二部分：Microsoft Defender 服务概述** * 说明 Microsoft 365 E5 订阅如何保护应用程序、终结点、身份和数据。 * 阐述本地、IaaS、PaaS 和 SaaS 基础设施模型之间的差异。 * 区分 Microsoft 365 和 Azure 云解决方案。 * **第三部分：实验室创建** * 演示免费试用 Office 365 E5 订阅的设置与配置。 * 为订阅添加 Microsoft 365 E5 许可证。 * 设置手机上的多重身份验证。 * 配置虚拟机并安装 Windows。 * **第四部分：用户和组管理** * 讲解用户和组的管理，包括用户模板、使用 CSV 文件创建多个用户。 * 演示如何使用 PowerShell 限制组创建。 * 说明组的使用场景（何时、何地、如何使用）。 * 定义角色。 * **第五部分：设备载入** * 介绍如何通过连接 Intune 和 Microsoft Defender for Endpoint 来载入设备。 * 创建“检测和响应”策略以实现此过程自动化。 * 配置下一代防病毒和攻击面缩减策略。 * 展示客户端虚拟机的测试结果。 * **第六部分：应用管理** * 演示如何创建和部署应用程序，例如公司门户应用、7-zip.msi、TeamViewer.exe、Notepad++.exe。 * 讲解如何自动和手动将 Microsoft 365 应用添加到安装中。 * 说明如何根据为用户和设备设置的规则来部署这些应用程序。 * 创建安全组和动态用户组。 * **第七部分：租户防御** * 讲解如何使用安全分数来轻松提高组织的安全性得分。 * 演示如何阻止旧版应用。 * 为管理员和用户设置多重身份验证、条件访问策略、用户风险和登录策略。 * 讲解如何使用登录日志和审核日志。 * 配置安全链接策略、安全附件策略、反恶意软件策略。 * 创建和测试敏感度标签。 * 配置 Microsoft Defender for Cloud Apps（设置云应用安全）。 * 演示如何阻止未经授权的应用程序。 * **第八部分：AutoPilot** * 介绍向用户交付“新电脑”的最佳方式，优于配置管理器和 MDT。 * 说明所需许可证、配置注册状态页、公司品牌和部署配置文件。 * 学习如何执行设备注册和 Windows 10 重置。 * 通过 Autopilot 自动且成功地将虚拟机加入 Intune 和 Azure AD，应用多重身份验证，并安装十一个应用程序、四个策略和两个配置文件。
This course is designed to provide you with a solid foundation for Windows 365 Cloud Network & Security Administration. We call it "Hands-On" because you will learn by completing the following tasks. Here is a description of each section in the course.Section 1 - The Introduction - Describes the Microsoft 365 Plans that are available, as well as basic cloud terminology.Section 2 - Microsoft Defender Services Overview - Describes how your Microsoft 365 E5 subscription protects your Applications, Endpoints, Identity and Data. Describes the differences between On-Premises, IaaS, PaaS and SaaS infrastructure models. Describes the differences between the Microsoft 365 and Azure cloud solutions.Section 3 - Lab creation - Describes the set up and configuration of your free trial Office 365 E5 subscription, then adding a Microsoft 365 E5 license to that subscription. Setup Multi-Factor-Authentication on your phone, setup your virtual machines, install Windows on your VM's Section 4 - Describes user and group management, user templates, creating multiple users using a CSV file. Using PowerShell to limit group creation. When, where and how to use groups. Defining RolesSection 5 - Device Onboarding - Describes onboarding by connecting your devices between Intune and Microsoft Defender for Endpoint and creating a Detect and respond policy that automates this process. Creating a Next Generation Antivirus, Attack Surface Reduction Policy. Demonstrates the results from the client VM.Section 6 - App Management - Demonstrates how to create and deploy applications like the Company portal app, 7-zip.msi, TeamViewer.exe, Notepad ++.exe.How to add Microsoft 365 Apps automatically and manually to your installation. How to deploy these apps based upon the rules that you setup for your users and devices. Creating Security Groups, Dynamic User Groups,Section 7 - Tenant Defense - Describes how to use Secure Score to easily increase the security score of your organization. Demonstrates how to Block Legacy Apps. Setup Multi-Factor-Authentication for admins and users, Conditional Access policies, setup User-risk and sign-in policies. How to use the Sign-in and Audit-logs.Setup Safe Links policy, Safe Attachments policy, Antimalware policy.Creating and testing Sensitivity Labels. Configure Microsoft Defender for Cloud Apps (setup Cloud App Security). Demonstrate blocking unauthorized applications.Section 8 - AutoPilot - The best way to deliver "New Computers to the User". Better than Configuration Manager, better than MDT!!Describes the required licenses, configuring the Enrollment status page, Company branding, Deployment profile.You will learn how to perform a device registration, a Windows 10 reset. With Autopilot you will join the VM to Intune and Azure AD, applying Multi-Factor-Authentication, install eleven apps, four policies and 2 profiles all automatically and successfully deployed.
