Azure Cloud Security Basic to Advanced Training Course
Azure is a cloud computing service platform by Microsoft that offers a wide collection of services to access and manage cloud resources and services.
This instructor-led, live training (online or onsite) is aimed at security administrators who wish to learn how to configure Azure cloud security to secure workloads running in Azure.
By the end of this training, participants will be able to:
- Configure host and network security.
- Configure Azure advanced security options.
- Use Azure to secure cloud computing workloads.
- Use endpoint protection services security against malware and viruses.
- Secure container workloads that are running in Azure.
Format of the Course
- Interactive lecture and discussion.
- Lots of exercises and practice.
- Hands-on implementation in a live-lab environment.
Course Customization Options
- To request a customized training for this course, please contact us to arrange.
Course Outline
Introduction
- Overview of Azure security
- Cloud computing basics
Fundamentals of Azure
- Understanding Azure basics
- Getting started with Azure
Configuring Host-level Security
- Understanding storage account security
- Data plane security
- Understanding encryption (in transit and at rest)
- Storage analytics
- Azure storage explorer
- Configuring Azure storage account security
- Protecting the VM OS environment
- Securing a VM during deployment
Configuring Deployment-level Security
- Understanding network security group
- Load balancer and NAT
- Using forced tunneling and network security appliances
- Configuring Azure load balancer
- Configuring NSG
- Understanding role-based access control (RBAC)
- Azure Resource Manager (ARM) policies
- Testing role-based access control
- Testing ARM policies
Configuring Azure Security Center
- Understanding Azure Security Center (ASC)
- Configuring ASC
- Inspecting ASC security
- Reviewing security alerts and incidents
Configuring VM Monitoring
- VM update management
- Configuring VM update automation
- Azure Automation Desired State Configuration (DSC)
Configuring VM Endpoint Protection
- Azure VM endpoint protection
- Deploying endpoint protection
- Azure VM vulnerability management
Configuring Azure App Services Authentication and Security
- Azure app service security
- Implementing Azure app services security
Configuring Azure Containers Authentication and Security
- Azure container registry and Kubernetes services authentication
- Deploying container registry and Azure Kubernetes service
- Azure Kubernetes service authentication
Configuring Azure Kubernetes Service Security
- Azure Kubernetes service and Azure container registry security
- Azure Kubernetes service isolation
Troubleshooting
Summary and Next Steps
Requirements
- Basic knowledge of cloud computing
- Knowledge of Microsoft Azure
Audience
- Security administrators
Need help picking the right course?
Azure Cloud Security Basic to Advanced Training Course - Enquiry
Testimonials (3)
Assimilable form of classes
Marek - Uniwersytet Szczecinski
Course - AZ-104T00-A: Microsoft Azure Administrator
Examples, relaxed atmosphere, ...
Marek - Uniwersytet Szczecinski
Course - AZ-040T00: Automating Administration with PowerShell
The Exercises
Khaled Altawallbeh - Accenture Industrial SS
Course - Azure Machine Learning (AML)
Related Courses
MS-20487: Developing Microsoft Azure and Web Services (authorized training course)
35 HoursAbout This Course
In this course, students will learn how to design and develop services that access local and remote data from various sources. Students will also learn how to develop and deploy services to hybrid environments, including on-premises servers and Microsoft Azure.
Audience Profile
Primary: .NET developers who want to learn how to develop services and deploy them to hybrid environments.
Secondary: .NET developers with Web application development experience who are exploring developing new applications or porting existing applications to Microsoft Azure.
At Course Completion
After completing this course, students will be able to:
- Describe the basic concepts of service development and data access strategies using the .NET platform.
- Describe the Microsoft Azure cloud platform and its compute, data, and application hosting offerings.
- Design and develop a data-centric application using Visual Studio 2017 and Entity Framework Core.
- Design, implement, and consume HTTP services using ASP.NET Core.
- Extend HTTP services using ASP.NET Core.
- Host services on-premises and in Microsoft Azure.
- Deploy services to both on-premises and cloud environments and manage the interface and policy for their services.
- Choose a data storage solution, cache, distribute, and synchronize data.
- Monitor, log, and troubleshoot services.
- Describe claim-based identity concepts and standards, and implement authentication and authorization with Azure Active Directory.
- Create scalable service applications.
Designing and Implementing an Azure AI Solution (authorized training course AI 100T01)
21 HoursGain the necessary knowledge for designing Azure AI solution by building a customer support chat Bot using artificial intelligence from the Microsoft Azure platform including language understanding and pre-built AI functionality in the Azure Cognitive Services.
Microsoft Azure AI Fundamentals (authorized training course AI 900T00)
7 HoursAbout This Course
This course introduces fundamentals concepts related to artificial intelligence (AI), and the services in Microsoft Azure that can be used to create AI solutions. The course is not designed to teach students to become professional data scientists or software developers, but rather to build awareness of common AI workloads and the ability to identify Azure services to support them. The course is designed as a blended learning experience that combines instructor-led training with online materials on the Microsoft Learn platform (https://azure.com/learn). The hands-on exercises in the course are based on Learn modules, and students are encouraged to use the content on Learn as reference materials to reinforce what they learn in the class and to explore topics in more depth.
Audience Profile
The Azure AI Fundamentals course is designed for anyone interested in learning about the types of solution artificial intelligence (AI) makes possible, and the services on Microsoft Azure that you can use to create them. You don’t need to have any experience of using Microsoft Azure before taking this course, but a basic level of familiarity with computer technology and the Internet is assumed. Some of the concepts covered in the course require a basic understanding of mathematics, such as the ability to interpret charts. The course includes hands-on activities that involve working with data and running code, so a knowledge of fundamental programming principles will be helpful.
At Course Completion
After completing this course, you will be able to:
- Describe Artificial Intelligence workloads and considerations
- Describe fundamental principles of machine learning on Azure
- Describe features of computer vision workloads on Azure
- Describe features of Natural Language Processing (NLP) workloads on Azure
- Describe features of conversational AI workloads on Azure
Building AI Cloud Apps with Microsoft Azure
35 HoursThis instructor-led, live training in Botswana (online or onsite) is aimed at intermediate-level to advanced-level professionals who wish to build and deploy AI-powered cloud applications using Microsoft Azure.
By the end of this training, participants will be able to:
- Develop event-driven and serverless applications using Azure Functions.
- Manage Azure storage solutions and virtual machines.
- Deploy and scale web applications using Azure App Service and Docker containers.
- Integrate AI, machine learning, and natural language processing using Azure AI Services.
- Leverage GitHub Copilot to assist in AI-driven cloud application development.
Azure Machine Learning (AML)
21 HoursThis instructor-led, live training in Botswana (online or onsite) is aimed at engineers who wish to use Azure ML's drag-and-drop platform to deploy Machine Learning workloads without having to purchase software and hardware and without having to worry about maintenance and deployment.
By the end of this training, participants will be able to:
- Write highly-accurate machine learning models using Python, R, or zero-code tools.
- Leverage Azure's available data sets and algorithms to train and track machine learning and deep-learning models.
- Use Azures interactive workspace to collaboratively develop ML models.
- Choose from different Azure-supported ML frameworks such as PyTorch, TensorFlow, and scikit-learn.
AZ-020: Microsoft Azure solutions for AWS developers (authorized training course)
21 HoursAbout This Course
A three-day course designed to teach AWS (Amazon Web Services) developers how to prepare end-to-end solutions in Microsoft Azure. In this course you will construct Azure App Service Web App solutions and Azure Functions, use blob or Cosmos DB storage in solutions, implement secure cloud solutions that include user authentication and authorization, implement API management, and develop event- and message-based solutions, and monitor, troubleshoot, and optimize your Azure solutions. You will learn how developers use Azure services, with additional focus on features and tasks that differ from AWS, and what that means for you as you develop applications that will be hosted by using Azure services.
Audience Profile
Students in this course are experienced AWS developers interested in Azure development.
AZ-040T00: Automating Administration with PowerShell
35 HoursThis course provides students with the fundamental knowledge and skills to use PowerShell for administering and automating administration of Windows servers. This course provides students the skills to identify and build the command they require to perform a specific task. In addition, students learn how to build scripts to accomplish advanced tasks such as automating repetitive tasks and generating reports. This course provides prerequisite skills supporting a broad range of Microsoft products, including Windows Server, Windows Client, Microsoft Azure, and Microsoft 365. In keeping with that goal, this course will not focus on any one of those products, although Windows Server, which is the common platform for all of those products, will serve as the example for the techniques this course teaches.
AZ-104T00-A: Microsoft Azure Administrator
28 HoursThis course teaches IT Professionals how to manage their Azure subscriptions, secure identities, administer the infrastructure, configure virtual networking, connect Azure and on-premises sites, manage network traffic, implement storage solutions, create and scale virtual machines, implement web apps and containers, back up and share data, and monitor your solution.
This course is for Azure Administrators. The Azure Administrator implements manages and monitors identity, governance, storage, compute, and virtual networks in a cloud environment. The Azure Administrator will provision, size, monitor, and adjust resources as appropriate.
AZ-140T00: Configuring and Operating Microsoft Azure Virtual Desktop
28 HoursThis course teaches Azure administrators how to plan, deliver, and manage virtual desktop experiences and remote apps, for any device, on Azure. Students will learn through a mix of demonstrations and hands-on lab experiences deploying virtual desktop experiences and apps on Azure Virtual Desktop and optimizing them to run in multi-session virtual environments.
AZ-204T00: Developing solutions for Microsoft Azure (authorized training course)
35 HoursAbout This Course
This course teaches developers how to create end-to-end solutions in Microsoft Azure. Students will learn how to implement Azure compute solutions, create Azure Functions, implement and manage web apps, develop solutions utilizing Azure storage, implement authentication and authorization, and secure their solutions by using KeyVault and Managed Identities. Students will also learn how to connect to and consume Azure services and third-party services, and include event- and message-based models in their solutions. The course also covers monitoring, troubleshooting, and optimizing Azure solutions.
Audience Profile
- Students in this course are interested in Azure development or in passing the Microsoft Azure Developer Associate certification exam.
Microsoft Azure Architect Technologies
35 HoursThis course teaches Solutions Architects how to translate business requirements into secure, scalable, and reliable solutions. Lessons include virtualization, automation, networking, storage, identity, security, data platform, and application infrastructure. This course outlines how decisions in each of these areas affect an overall solution.
Audience profile
This course is for IT Professionals with expertise in designing and implementing solutions running on Microsoft Azure. They should have broad knowledge of IT operations, including networking, virtualization, identity, security, business continuity, disaster recovery, data platform, budgeting, and governance. Azure Solution Architects use the Azure Portal and as they become more adept they use the Command Line Interface. Candidates must have expert-level skills in Azure administration and have experience with Azure development processes and DevOps processes.
AZ-304T00-A: Microsoft Azure Architect Design
28 HoursThis course teaches Solutions Architects how to translate business requirements into secure, scalable, and reliable solutions. Lessons include design considerations related to logging, cost analysis, authentication and authorization, governance, security, storage, high availability, and migration. This role requires decisions in multiple areas that affect an overall design solution.
AZ-305T00: Designing Microsoft Azure Infrastructure Solutions
28 HoursSkills gained
- Design a governance solution.
- Design a compute solution.
- Design an application architecture.
- Design storage, non-relational and relational.
- Design data integration solutions.
- Design authentication, authorization, and identity solutions.
- Design network solutions.
- Design backup and disaster recovery solutions.
- Design monitoring solutions.
- Design migration solutions.
AZ-400T00-A: Designing and Implementing Microsoft DevOps solutions
35 HoursThis course provides the knowledge and skills to design and implement DevOps processes and practices. Students will learn how to plan for DevOps, use source control, scale Git for an enterprise, consolidate artifacts, design a dependency management strategy, manage secrets, implement continuous integration, implement a container build strategy, design a release strategy, set up a release management workflow, implement a deployment pattern, and optimize feedback mechanisms.
Audience profile
Students in this course are interested in designing and implementing DevOps processes or in passing the Microsoft Azure DevOps Solutions certification exam.
Job role: DevOps Engineer
Preparation for exam: AZ-400
Skills gained
- Plan for the transformation with shared goals and timelines
- Select a project and identify project metrics and Key Performance Indicators (KPI's)
- Create a team and agile organizational structure
- Design a tool integration strategy
- Design a license management strategy (e.g. Azure DevOps and GitHub users)
- Design a strategy for end-to-end traceability from work items to working software
- Design an authentication and access strategy
- Design a strategy for integrating on-premises and cloud resources
- Describe the benefits of using Source Control
- Describe Azure Repos and GitHub
- Migrate from TFVC to Git
- Manage code quality including technical debt SonarCloud, and other tooling solutions
- Build organizational knowledge on code quality
- Explain how to structure Git repos
- Describe Git branching workflows
- Leverage pull requests for collaboration and code reviews
- Leverage Git hooks for automation
- Use Git to foster inner source across the organization
- Explain the role of Azure Pipelines and its components
- Configure Agents for use in Azure Pipelines
- Explain why continuous integration matters
- Implement continuous integration using Azure Pipelines
- Define Site Reliability Engineering
- Design processes to measure end-user satisfaction and analyze user feedback
- Design processes to automate application analytics
- Manage alerts and reduce meaningless and non-actionable alerts
- Carry out blameless retrospectives and create a just culture
- Define an infrastructure and configuration strategy and appropriate toolset for a release pipeline and application infrastructure
- Implement compliance and security in your application infrastructure
- Describe the potential challenges with integrating open-source software
- Inspect open-source software packages for security and license compliance
- Manage organizational security and compliance policies
- Integrate license and vulnerability scans into build and deployment pipelines
- Configure build pipelines to access package security and license ratings
AZ-500T00-A: Microsoft Azure Security Technologies
28 HoursThis course provides IT Security Professionals with the knowledge and skills needed to implement security controls, maintain an organization’s security posture, and identify and remediate security vulnerabilities. This course includes security for identity and access, platform protection, data and applications, and security operations.
Audience profile
This course is for Azure Security Engineers who are planning to take the associated certification exam, or who are performing security tasks in their day-to-day job. This course would also be helpful to an engineer that wants to specialize in providing security for Azure-based digital platforms and play an integral role in protecting an organization's data.
Skills gained
- Implement enterprise governance strategies including role-based access control, Azure policies, and resource locks.
- Implement an Azure AD infrastructure including users, groups, and multi-factor authentication.
- Implement Azure AD Identity Protection including risk policies, conditional access, and access reviews.
- Implement Azure AD Privileged Identity Management including Azure AD roles and Azure resources.
- Implement Azure AD Connect including authentication methods and on-premises directory synchronization.
- Implement perimeter security strategies including Azure Firewall.
- Implement network security strategies including Network Security Groups and Application Security Groups.
- Implement host security strategies including endpoint protection, remote access management, update management, and disk encryption.
- Implement container security strategies including Azure Container Instances, Azure Container Registry, and Azure Kubernetes.
- Implement Azure Key Vault including certificates, keys, and secretes.
- Implement application security strategies including app registration, managed identities, and service endpoints.
- Implement storage security strategies including shared access signatures, blob retention policies, and Azure Files authentication.
- Implement database security strategies including authentication, data classification, dynamic data masking, and always encrypted.
- Implement Azure Monitor including connected sources, log analytics, and alerts.
- Implement Azure Security Center including policies, recommendations, and just in time virtual machine access.
- Implement Azure Sentinel including workbooks, incidents, and playbooks.