Azure Cloud Security Basic to Advanced Training Course
Azure, a cloud computing platform provided by Microsoft, delivers an extensive suite of services for accessing and managing cloud resources.
This instructor-led live training, available either online or on-site, is designed for security administrators seeking to master the configuration of Azure cloud security to protect workloads hosted within the Azure environment.
Upon completion of this training, participants will be capable of:
- Setting up host and network security protocols.
- Configuring advanced security features within Azure.
- Utilizing Azure to safeguard cloud computing workloads.
- Employing endpoint protection services to defend against malware and viruses.
- Securing container workloads operating in Azure.
Course Format
- Interactive lectures paired with group discussions.
- Abundant exercises and practical practice sessions.
- Hands-on implementation exercises within a live laboratory environment.
Customization Options
- For those interested in a customized version of this course, please reach out to us to arrange your specific requirements.
Course Outline
Introduction
- Overview of Azure security
- Cloud computing basics
Fundamentals of Azure
- Understanding Azure basics
- Getting started with Azure
Configuring Host-level Security
- Understanding storage account security
- Data plane security
- Understanding encryption (in transit and at rest)
- Storage analytics
- Azure storage explorer
- Configuring Azure storage account security
- Protecting the VM OS environment
- Securing a VM during deployment
Configuring Deployment-level Security
- Understanding network security group
- Load balancer and NAT
- Using forced tunneling and network security appliances
- Configuring Azure load balancer
- Configuring NSG
- Understanding role-based access control (RBAC)
- Azure Resource Manager (ARM) policies
- Testing role-based access control
- Testing ARM policies
Configuring Azure Security Center
- Understanding Azure Security Center (ASC)
- Configuring ASC
- Inspecting ASC security
- Reviewing security alerts and incidents
Configuring VM Monitoring
- VM update management
- Configuring VM update automation
- Azure Automation Desired State Configuration (DSC)
Configuring VM Endpoint Protection
- Azure VM endpoint protection
- Deploying endpoint protection
- Azure VM vulnerability management
Configuring Azure App Services Authentication and Security
- Azure app service security
- Implementing Azure app services security
Configuring Azure Containers Authentication and Security
- Azure container registry and Kubernetes services authentication
- Deploying container registry and Azure Kubernetes service
- Azure Kubernetes service authentication
Configuring Azure Kubernetes Service Security
- Azure Kubernetes service and Azure container registry security
- Azure Kubernetes service isolation
Troubleshooting
Summary and Next Steps
Requirements
- Fundamental understanding of cloud computing
- Working knowledge of Microsoft Azure
Target Audience
- Security administrators
Open Training Courses require 5+ participants.
Azure Cloud Security Basic to Advanced Training Course - Booking
Azure Cloud Security Basic to Advanced Training Course - Enquiry
Azure Cloud Security Basic to Advanced - Consultancy Enquiry
Testimonials (2)
Examples and their usage
Dariusz Frycz - WASKO SPOLKA AKCYJNA
Course - AZ-040T00: Automating Administration with PowerShell
Everything, is a new platform for me and everything was interesting.
Sergiu
Course - AZ-104T00-A: Microsoft Azure Administrator
Upcoming Courses
Related Courses
MS-20487: Developing Microsoft Azure and Web Services (authorized training course)
35 HoursAbout This Course
This course teaches students how to design and build services that retrieve local and remote data from a variety of sources. Participants will also learn how to develop and deploy these services within hybrid environments, encompassing both on-premises servers and Microsoft Azure.
Audience Profile
Primary: .NET developers aiming to learn how to develop services and deploy them to hybrid environments.
Secondary: .NET developers with experience in Web application development who are interested in creating new applications or migrating existing ones to Microsoft Azure.
At Course Completion
Upon finishing this course, students will be able to:
- Explain the fundamental concepts of service development and data access strategies using the .NET platform.
- Describe the Microsoft Azure cloud platform along with its compute, data, and application hosting capabilities.
- Design and develop data-centric applications using Visual Studio 2017 and Entity Framework Core.
- Design, implement, and consume HTTP services using ASP.NET Core.
- Extend HTTP services using ASP.NET Core.
- Host services both on-premises and in Microsoft Azure.
- Deploy services to on-premises and cloud environments, managing their interfaces and policies.
- Select appropriate data storage solutions, cache, distribute, and synchronize data.
- Monitor, log, and troubleshoot services.
- Explain claim-based identity concepts and standards, and implement authentication and authorization with Azure Active Directory.
- Create scalable service applications.
Designing and Implementing an Azure AI Solution (authorized training course AI 100T01)
21 HoursAcquire the essential expertise required to design Azure AI solutions. You will gain hands-on experience building a customer support chatbot powered by artificial intelligence via the Microsoft Azure platform, leveraging language understanding capabilities and pre-built AI features within Azure Cognitive Services.
Microsoft Azure AI Fundamentals (authorized training course AI 900T00)
7 HoursAbout This Course
This course provides an introduction to the core concepts of artificial intelligence (AI) and the Microsoft Azure services available for building AI solutions. Rather than aiming to train students to become professional data scientists or software developers, the course focuses on raising awareness of common AI workloads and helping participants identify the appropriate Azure services to support those workloads. Designed as a blended learning experience, it combines instructor-led training with online materials hosted on the Microsoft Learn platform (https://azure.com/learn). The hands-on exercises are aligned with Learn modules, and students are encouraged to use the Learn platform as a reference to reinforce classroom learning and explore topics in greater depth.
Audience Profile
The Azure AI Fundamentals course is designed for individuals interested in understanding the types of solutions made possible by artificial intelligence (AI) and the Microsoft Azure services available to create them. No prior experience with Microsoft Azure is required, though a basic familiarity with computer technology and the Internet is assumed. Some concepts covered require a fundamental understanding of mathematics, particularly the ability to interpret charts. Additionally, the course includes hands-on activities involving data manipulation and code execution, so knowledge of basic programming principles will be beneficial.
At Course Completion
After completing this course, you will be able to:
- Describe AI workloads and their associated considerations
- Explain fundamental principles of machine learning on Azure
- Outline the features of computer vision workloads on Azure
- Outline the features of Natural Language Processing (NLP) workloads on Azure
- Outline the features of conversational AI workloads on Azure
Building AI Cloud Apps with Microsoft Azure
35 HoursThis instructor-led, live training in Serbia (available online or onsite) is designed for intermediate to advanced professionals who wish to construct and deploy AI-powered cloud applications using Microsoft Azure.
By the conclusion of this training, participants will be able to:
- Create event-driven and serverless applications using Azure Functions.
- Manage Azure storage solutions and virtual machines.
- Deploy and scale web applications using Azure App Service and Docker containers.
- Integrate AI, machine learning, and natural language processing via Azure AI Services.
- Leverage GitHub Copilot to aid in AI-driven cloud application development.
Azure Machine Learning (AML)
21 HoursThis instructor-led, live training in Serbia (online or onsite) is designed for engineers who want to use Azure ML's drag-and-drop platform to deploy machine learning workloads. This allows them to operate without the need to purchase software and hardware, and without worrying about maintenance and deployment.
Upon completion of this training, participants will be capable of:
- Developing highly accurate machine learning models using Python, R, or zero-code tools.
- Utilizing Azure's available data sets and algorithms to train and monitor machine learning and deep learning models.
- Leveraging Azure's interactive workspace to collaboratively develop machine learning models.
- Selecting from various Azure-supported ML frameworks, including PyTorch, TensorFlow, and scikit-learn.
AZ-020: Microsoft Azure solutions for AWS developers (authorized training course)
21 HoursAbout This Course
This three-day course is designed to equip AWS (Amazon Web Services) developers with the skills needed to build comprehensive end-to-end solutions in Microsoft Azure. Throughout the course, you will create Azure App Service Web Apps and Azure Functions, utilize blob storage and Cosmos DB within your solutions, implement secure cloud architectures involving user authentication and authorization, manage APIs, and develop event-driven and message-based solutions. Additionally, you will learn how to monitor, troubleshoot, and optimize your Azure environments. The curriculum highlights how developers leverage Azure services, with special attention to features and tasks that differ from AWS, helping you understand the implications for your application development when hosting on Azure.
Audience Profile
This course is intended for experienced AWS developers who are looking to transition into Azure development.
AZ-040T00: Automating Administration with PowerShell
35 HoursThis course equips students with the essential knowledge and skills needed to utilize PowerShell for administering and automating the management of Windows servers. Learners will develop the ability to identify and construct the specific commands required to execute particular tasks. Furthermore, students will learn how to write scripts to handle advanced operations, such as automating repetitive processes and generating reports. The course provides prerequisite skills that support a wide array of Microsoft products, including Windows Server, Windows Client, Microsoft Azure, and Microsoft 365. Consistent with this objective, the course does not focus on any single product; however, Windows Server, being the common platform for all these technologies, serves as the primary example for teaching these techniques.
AZ-104T00-A: Microsoft Azure Administrator
28 HoursThis course equips IT professionals with the skills to manage Azure subscriptions, secure identities, administer infrastructure, configure virtual networking, integrate Azure with on-premises environments, manage network traffic, implement storage solutions, deploy and scale virtual machines, create web applications and containers, back up and share data, and monitor solutions.
Designed for Azure Administrators, this training covers the implementation, management, and monitoring of identity, governance, storage, compute, and virtual networks in cloud environments. Participants will learn to provision, size, monitor, and adjust resources effectively.
AZ-140T00: Configuring and Operating Microsoft Azure Virtual Desktop
28 HoursThis course equips Azure administrators with the skills to plan, deliver, and manage virtual desktop experiences and remote applications for any device on Azure. Through a combination of demonstrations and hands-on lab exercises, students will learn to deploy and optimize virtual desktop experiences and applications on Azure Virtual Desktop within multi-session virtual environments.
AZ-204T00: Developing solutions for Microsoft Azure (authorized training course)
35 HoursAbout This Course
This course teaches developers how to create end-to-end solutions in Microsoft Azure. Students will learn how to implement Azure compute solutions, create Azure Functions, implement and manage web apps, develop solutions utilizing Azure storage, implement authentication and authorization, and secure their solutions by using KeyVault and Managed Identities. Students will also learn how to connect to and consume Azure services and third-party services, and include event- and message-based models in their solutions. The course also covers monitoring, troubleshooting, and optimizing Azure solutions.
Audience Profile
- Students in this course are interested in Azure development or in passing the Microsoft Azure Developer Associate certification exam.
Microsoft Azure Architect Technologies
35 HoursThis program equips Solutions Architects with the skills to translate business requirements into secure, scalable, and reliable solutions. Key topics include virtualization, automation, networking, storage, identity, security, data platforms, and application infrastructure. The course highlights how decisions in each of these areas influence the overall solution architecture.
Audience profile
This course is designed for IT Professionals who specialize in designing and implementing solutions on Microsoft Azure. Participants should possess broad IT operations knowledge, including networking, virtualization, identity, security, business continuity, disaster recovery, data platforms, budgeting, and governance. Azure Solution Architects utilize the Azure Portal and, as proficiency increases, the Command Line Interface. Candidates must demonstrate expert-level skills in Azure administration and have experience with Azure development and DevOps processes.
AZ-304T00-A: Microsoft Azure Architect Design
28 HoursThis course equips Solutions Architects with the skills to translate business requirements into secure, scalable, and reliable solutions. Key topics include design considerations for logging, cost analysis, authentication and authorization, governance, security, storage, high availability, and migration. This role involves making critical decisions across multiple areas that influence the overall design solution.
AZ-305T00: Designing Microsoft Azure Infrastructure Solutions
28 HoursKey Skills Acquired
- Develop comprehensive governance strategies.
- Architect robust compute solutions.
- Design scalable application architectures.
- Create effective storage strategies for both relational and non-relational data.
- Implement seamless data integration solutions.
- Establish identity, authentication, and authorization frameworks.
- Configure advanced network architectures.
- Plan backup and disaster recovery protocols.
- Set up proactive monitoring solutions.
- Formulate effective cloud migration plans.
AZ-400T00-A: Designing and Implementing Microsoft DevOps solutions
35 HoursThis course equips participants with the knowledge and skills necessary to design and implement effective DevOps processes and practices. Participants will learn how to plan for DevOps adoption, utilize source control, scale Git within an enterprise environment, consolidate artifacts, design dependency management strategies, manage secrets, implement continuous integration, establish container build strategies, design release strategies, set up release management workflows, implement deployment patterns, and optimize feedback mechanisms.
Audience Profile
This course is ideal for students interested in designing and implementing DevOps processes or preparing for the Microsoft Azure DevOps Solutions certification exam.
Job Role: DevOps Engineer
Exam Preparation: AZ-400
Skills Gained
- Plan organizational transformation through shared goals and timelines
- Select projects and identify project metrics and Key Performance Indicators (KPIs)
- Establish team structures and agile organizational frameworks
- Design strategies for tool integration
- Develop license management strategies (e.g., for Azure DevOps and GitHub users)
- Create strategies for end-to-end traceability from work items to working software
- Design authentication and access strategies
- Formulate strategies for integrating on-premises and cloud resources
- Explain the benefits of using Source Control
- Describe Azure Repos and GitHub
- Migrate from TFVC to Git
- Manage code quality, including technical debt management via SonarCloud and other tools
- Build organizational knowledge regarding code quality
- Explain methods for structuring Git repositories
- Describe Git branching workflows
- Leverage pull requests for collaboration and code reviews
- Utilize Git hooks for automation
- Use Git to foster inner source practices across the organization
- Explain the role of Azure Pipelines and its components
- Configure Agents for use in Azure Pipelines
- Explain the importance of continuous integration
- Implement continuous integration using Azure Pipelines
- Define Site Reliability Engineering
- Design processes to measure end-user satisfaction and analyze user feedback
- Design processes to automate application analytics
- Manage alerts and reduce meaningless or non-actionable notifications
- Conduct blameless retrospectives and create a just culture
- Define infrastructure and configuration strategies and toolsets for release pipelines and application infrastructure
- Implement compliance and security within application infrastructure
- Describe potential challenges with integrating open-source software
- Inspect open-source software packages for security and license compliance
- Manage organizational security and compliance policies
- Integrate license and vulnerability scans into build and deployment pipelines
- Configure build pipelines to access package security and license ratings
AZ-500T00-A: Microsoft Azure Security Technologies
28 HoursDesigned for IT security professionals, this course equips participants with the essential knowledge and skills to implement security controls, sustain an organization's security posture, and detect and remediate vulnerabilities. The curriculum encompasses security for identity and access, platform protection, data and applications, and security operations.
Audience profile
This course is ideal for Azure Security Engineers who are preparing for the associated certification exam or who perform security tasks in their daily roles. It is also beneficial for engineers seeking to specialize in securing Azure-based digital platforms and playing a critical role in protecting organizational data.
Skills gained
- Deploy enterprise governance strategies, including role-based access control, Azure policies, and resource locks.
- Establish an Azure AD infrastructure, including users, groups, and multi-factor authentication.
- Configure Azure AD Identity Protection, incorporating risk policies, conditional access, and access reviews.
- Deploy Azure AD Privileged Identity Management for managing Azure AD roles and Azure resources.
- Configure Azure AD Connect, covering authentication methods and on-premises directory synchronization.
- Deploy perimeter security strategies, such as Azure Firewall.
- Deploy network security strategies, including Network Security Groups and Application Security Groups.
- Deploy host security strategies, including endpoint protection, remote access management, update management, and disk encryption.
- Deploy container security strategies, including Azure Container Instances, Azure Container Registry, and Azure Kubernetes.
- Configure Azure Key Vault, managing certificates, keys, and secrets.
- Deploy application security strategies, including app registration, managed identities, and service endpoints.
- Deploy storage security strategies, including shared access signatures, blob retention policies, and Azure Files authentication.
- Deploy database security strategies, including authentication, data classification, dynamic data masking, and always encrypted.
- Configure Azure Monitor, including connected sources, log analytics, and alerts.
- Configure Azure Security Center, including policies, recommendations, and just-in-time virtual machine access.
- Configure Azure Sentinel, including workbooks, incidents, and playbooks.