Reviews 4,2
Reviews 4,5
100% fundable

SC-5002 Secure Azure services and workloads with Microsoft Defender for Cloud regulatory compliance controls

Regulatory requirements and security risks go hand in hand in cloud environments. Microsoft Defender for Cloud creates a unified foundation for keeping both under control.

Key topics

  • Using Microsoft Defender for Cloud to meet compliance requirements.
  • Handling governmental and legal requirements in Azure environments.
  • Activating protection features for Azure workloads and services.
  • Configuring and enforcing policies in a governance context.
  • Evaluating security scores and risk overviews at a glance.

Prerequisite
Those who have already worked with Azure and are familiar with IT security concepts will get the most out of this course.

Target group
Professionals in cloud projects, IT architecture, and compliance or governance roles will benefit most from this training.

After the course, you will be able to protect Azure workloads in a compliant manner and close security gaps with Defender for Cloud.

Course content
  • Setting up and managing Azure resource groups
  • Concepts and configuration of Azure virtual networks
  • Securing and controlling network access with NSGs
  • Setting up application-level security groups
  • Setting up and using Defender for Cloud monitoring with Log Analytics
  • Initial setup and basic configuration of Microsoft Defender for Cloud
  • Monitoring the security posture of Azure resources
  • Activating and managing protection for Azure workloads
  • Deploying Defender for Cloud in an Azure environment
  • Integrating Azure Arc into security scenarios
  • Understanding and using the extension capabilities of Azure Arc
  • Using the Microsoft Cloud Security Benchmark as a reference framework
  • Improving compliance status and deriving actions
  • Creating and customising Defender for Cloud policies
  • Viewing and editing security policies in the Azure portal
  • Analysing and implementing Defender recommendations
  • Examining security scores and score progression
  • Applying the MITRE ATT&CK matrix in Azure security contexts
  • Identifying and evaluating brute-force attack scenarios
  • Understanding how just-in-time VM access works
  • Setting up just-in-time VM access in practice
  • Centrally collecting workload data via the Log Analytics agent
  • Configuring the agent and its associated workspace
  • Understanding the principles and architecture of Azure Key Vault
  • Applying recommended practices for Key Vault operations
  • Setting up security mechanisms in Key Vault
  • Configuring firewall and network access for Key Vault
  • Activating Soft Delete to prevent accidental data loss
  • Configuring virtual network endpoints for Key Vault
  • Securely connecting Azure SQL Server in the portal via a private endpoint

Your Personal Path to the Right Continuing Education Program—We Provide Personalized Guidance

Our experienced educational advisors will guide you from your very first question all the way to the start of your continuing education program.