Gain insights into securing Azure workloads. Explore authentication, authorization, private, and public access restrictions, compliance, and threat monitoring using tools like Entra ID, Azure Firewall, Policy, and Sentinel.

azure.tar.gz

In this course, you’ll start your journey by understanding how to authenticate and authorize resources in Microsoft Entra ID and Azure. Next, you’ll learn how to restrict access to Azure resources using Azure Virtual Networks, Azure Firewall, and Azure network security groups. You’ll also explore how to secure private access to Azure resources. 

Furthermore, you’ll learn how to restrict public access to Azure resources with Azure Application Gateway, Azure WAF, Azure Front Door, and Azure DDoS. Moreover, you’ll also learn how to secure computing, storage, and database resources in Azure.

After completing this course, you can maintain compliance with corporate standards and regulatory requirements across the Azure environment with Azure Policy and Microsoft Defender for Cloud. You’ll also learn how to monitor and analyze metrics and logs with Azure Monitor, Azure Log Analytics, and Azure Sentinel and then automate predefined actions if a threat occurs.

Securing Azure Workloads: Principles and Practices

Subnets can be connected to other Virtual Networks using peering.

Subnets are isolated from each other by default.

Subnets does not exists in Azure Virtual Network. 

What option is *true* regarding Azure Virtual Network subnets?

What option is true regarding Azure Virtual Network subnets?

To control inbound and outbound traffic to virtual machines

To manage virtual machine disks and snapshots

To provide load balancing for virtual machines

What is the purpose of a network security group (NSG) in Azure Virtual Network?

What is the purpose of a network security group (NSG) in Azure Virtual Network?

What is the maximum number of virtual networks you can create in a single Azure subscription?

What is the maximum number of virtual networks you can create in a single Azure subscription?

Virtual Private Network (VPN) connectivity

What option is *not* a feature of Azure Virtual Network?

What option is not a feature of Azure Virtual Network?

Which Azure service provides centralized network security management for Azure Virtual Network and on-premises networks?

Which Azure service provides centralized network security management for Azure Virtual Network and on-premises networks?

To provide a secure connection between an Azure Virtual Network and on-premises network

To extend a virtual network's private address space to the internet

To provide secure and private connectivity to Azure services from a Virtual Network

What is the primary purpose of Azure private endpoint?

What is the primary purpose of Azure private endpoint?

Which option is *not* a benefit of using Azure Virtual Network?

Which option is not a benefit of using Azure Virtual Network?

Which Azure service can be used to manage access to resources in Azure Virtual Network?

Which Azure service can be used to manage access to resources in Azure Virtual Network?

Test what you’ve learned in this chapter. 

Introduction to the Course

Identity and Access Management

Secure Networking

Secure Compute, Storage, and Databases

Manage Security Operations

Conclusion

Assessment I

Assessment II

Assessment III

Quiz: Secure Networking