|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/microsoft-az-500-azure-security-engineer-associate-2021/
课程评论：没有评论
课程名称：Microsoft AZ-500 Azure 安全工程师助理 2023 概述： IT认证是提升个人价值、薪资和就业机会的重要凭证。Microsoft AZ-500 Azure 安全工程师助理课程将帮助您设计和实施 Azure 平台上的安全基础设施。通过理解安全最佳实践和行业安全要求，学习者将能够利用 Azure 安全技术设计、开发和管理安全基础设施。课程包含由 Azure 认证专业人士创建的 100 道模拟试题，涵盖官方考试指南中所有相关内容。 主要内容包括： 1. **管理身份和访问（30-35%）** - 管理 Azure Active Directory 用户和组，配置安全设置及身份验证方法。 - 实施条件访问策略，包括多因素认证（MFA）。 - 创建应用注册，管理 API 访问权限和资源权限。 2. **实施平台保护（15-20%）** - 配置高级网络安全措施，包括虚拟网络的安全连接和网络安全组的设置。 - 保障计算资产的安全，实施漏洞管理和加密。 3. **管理安全操作（25-30%）** - 使用 Azure 监控工具创建安全警报，监视安全日志。 - 使用 Azure Sentinel 进行安全事件的监控和响应管理。 4. **保护数据和应用程序（20-25%）** - 配置存储和数据库的安全设置，实施数据库审计和加密。 - 管理密钥库（Key Vault）并配置其安全策略。 本课程将帮助您为参加正式考试做好准备。考试内容包括详细解答的题目和官方及非官方文档的参考链接，提供备考所需的插图和资料。加入我们，准备迎接考试挑战！
IT certifications are important credentials that can boost your value, your salary, and your employment opportunities. Microsoft AZ-500 Azure Security Engineer Associate enables you to design and implement a secure infrastructure on Azure Platform. Through an understanding of security best practices and industry security requirements, this individual designs, develops and manages a secure infrastructure leveraging Azure security technologies.This course contains 100 questions in 4 practice exams created by Azure certified professionals that cover all aspects included in the official exam guide:Manage identity and access (30-35%)Manage Azure Active Directory identities· configure security for service principals· manage Azure AD directory groups· manage Azure AD users· manage administrative units· configure password writeback· configure authentication methods including password hash and Pass Through· Authentication (PTA), OAuth, and passwordless· transfer Azure subscriptions between Azure AD tenantsConfigure secure access by using Azure AD· monitor privileged access for Azure AD Privileged Identity Management (PIM)· configure Access Reviews· configure PIM· implement Conditional Access policies including Multi-Factor Authentication (MFA)· configure Azure AD identity protectionManage application access· create App Registration· configure App Registration permission scopes· manage App Registration permission consent· manage API access to Azure subscriptions and resourcesManage access control· configure subscription and resource permissions· configure resource group permissions· configure custom RBAC roles· identify the appropriate role· apply the principle of least privilege· interpret permissions· check accessImplement platform protection (15-20%)Implement advanced network security· secure the connectivity of virtual networks (VPN authentication, Express Route· encryption)· configure Network Security Groups (NSGs) and Application Security Groups (ASGs)· create and configure Azure Firewall· implement Azure Firewall Manager· configure Azure Front Door service as an Application Gateway· configure a Web Application Firewall (WAF) on Azure Application Gateway· configure Azure Bastion· configure a firewall on a storage account, Azure SQL, Key Vault, or App Service· implement Service Endpoints· implement DDoS protectionConfigure advanced security for compute· configure endpoint protection· configure and monitor system updates for VMs· configure authentication for Azure Container Registry· configure security for different types of containers· implement vulnerability management· configure isolation for AKS· configure security for container registry· implement Azure Disk Encryption· configure authentication and security for Azure App Service· configure SSL/TLS certs· configure authentication for Azure Kubernetes Service· configure automatic updatesManage security operations (25-30%)Monitor security by using Azure Monitor· create and customize alerts· monitor security logs by using Azure Monitor· configure diagnostic logging and log retention· Monitor security by using Azure Security Center· evaluate vulnerability scans from Azure Security Center· configure Just in Time VM access by using Azure Security Center· configure centralized policy management by using Azure Security Center· configure compliance policies and evaluate for compliance by using Azure Security· Center· configure workflow automation by using Azure Security CenterMonitor security by using Azure Sentinel· create and customize alerts· configure data sources to Azure Sentinel· evaluate results from Azure Sentinel· configure a playbook by using Azure SentinelConfigure security policies· configure security settings by using Azure Policy· configure security settings by using Azure BlueprintSecure data and applications (20-25%)Configure security for storage· configure access control for storage accounts· configure key management for storage accounts· configure Azure AD authentication for Azure Storage· configure Azure AD Domain Services authentication for Azure Files· create and manage Shared Access Signatures (SAS)· create a shared access policy for a blob or blob container· configure Storage Service Encryption· configure Azure Defender for StorageConfigure security for databases· enable database authentication· enable database auditing· configure Azure Defender for SQL· configure Azure SQL Database Advanced Threat Protection· implement database encryptiono implement Azure SQL Database Always EncryptedConfigure and manage Key Vault· manage access to Key Vault· manage permissions to secrets, certificates, and keys· configure RBAC usage in Azure Key Vault· manage certificates· manage secrets· configure key rotation· backup and restore of Key Vault items· configure Azure Defender for Key VaultThis practice test will help you prepare and pass the real official exam test environment. Questions include:Answers with detailed explanation.Reference links to official and unofficial documentation.Illustrations to prepare for the exam.Join us and get ready to pass!!:)
