AZ-500: Microsoft Azure Security Technologies

Module 1: Secure Identity and Access

• Microsoft Entra ID security
• Azure built-in roles
• Custom Azure roles
• Microsoft Entra roles
• Azure RBAC
• Privileged Identity Management (PIM)
• Multi-factor authentication (MFA)
• Conditional Access
• Managed identities
• Application access security
• Identity governance
• Secure authentication and authorization

Module 2: Secure Networking

• Azure Virtual Network security
• Network Security Groups
• Application Security Groups
• Network security architecture
• Azure Firewall
• Azure DDoS Protection
• Web Application Firewall
• Azure Bastion
• Network segmentation
• Private endpoints
• Service endpoints
• Network security monitoring
• Secure hybrid connectivity

Module 3: Secure Compute, Storage, and Databases

• Virtual machine security
• VM access controls
• Just-in-time VM access
• Azure Disk Encryption
• Container security
• Azure App Service security
• Azure Storage security
• Storage access controls
• Shared Access Signatures
• Storage encryption
• Immutable storage
• Azure SQL security
• Microsoft Entra database authentication
• Transparent Data Encryption
• SQL auditing
• Always Encrypted
• Dynamic data masking

Module 4: Manage Security Keys, Secrets, and Certificates

• Azure Key Vault
• Key Vault access controls
• Secrets management
• Encryption keys
• Certificates
• Key rotation
• Key Vault network security
• Role-based access to Key Vault
• Bring Your Own Key (BYOK)

Module 5: Implement Azure Security Governance

• Azure Policy
• Policy definitions
• Policy initiatives
• Compliance monitoring
• Resource governance
• Security baselines
• Regulatory compliance
• Azure security recommendations
• Security posture management

Module 6: Implement Microsoft Defender for Cloud

• Microsoft Defender for Cloud
• Cloud security posture management
• Secure Score
• Security recommendations
• Workload protection
• Defender plans
• Threat detection
• Security alerts
• Regulatory compliance dashboard
• Cloud workload security

Module 7: Implement Microsoft Sentinel

• Microsoft Sentinel fundamentals
• Security Information and Event Management (SIEM)
• Security analytics
• Data connectors
• Log collection
• Analytics rules
• Incident management
• Threat hunting
• Automation rules
• Playbooks
• Security monitoring and response

Module 8: Monitor and Respond to Security Threats

• Security alerts and incidents
• Threat detection
• Security monitoring
• Incident investigation
• Security response workflows
• Microsoft Defender integrations
• Microsoft Sentinel investigations
• Threat intelligence
• Security remediation

• Azure Security Engineers
• Cloud Security Engineers
• Cybersecurity Professionals
• Azure Administrators
• Cloud Administrators
• Network Security Professionals
• Security Operations Professionals
• SOC Analysts
• Cloud Engineers
• IT Security Professionals
• Security Architects
• System Administrators responsible for Azure environments
• Professionals preparing for the AZ-500 examination

• Secure Microsoft Entra identities and Azure resources.
• Implement Azure RBAC, custom roles, PIM, MFA, and Conditional Access.
• Configure security controls for Azure networking and hybrid environments.
• Protect Azure workloads using Azure Firewall, DDoS Protection, WAF, and network segmentation.
• Secure virtual machines, containers, applications, storage, and databases.
• Implement data protection using encryption, immutable storage, TDE, and Always Encrypted.
• Manage keys, secrets, and certificates using Azure Key Vault.
• Implement governance and compliance using Azure Policy.
• Assess security posture using Microsoft Defender for Cloud.
• Configure threat protection and security recommendations for cloud workloads.
• Use Microsoft Sentinel for SIEM, security analytics, threat hunting, incident management, and response.
• Develop practical skills for identifying and remediating Azure security vulnerabilities.
• Build capabilities aligned with the Azure Security Engineer role.

• Practical experience with Microsoft Azure administration.
• Familiarity with Azure and hybrid infrastructure.
• Strong understanding of Microsoft Entra ID.
• Knowledge of Azure compute, networking, and storage.
• Understanding of identity and access management.
• Basic knowledge of network security and virtualization.
• Familiarity with security monitoring and incident response.
• Experience with Azure governance and security controls is beneficial.
• Familiarity with Microsoft Defender for Cloud and Microsoft Sentinel is helpful but not mandatory.

Certification: Microsoft Certified: Azure Security Engineer Associate
Exam: AZ-500: Microsoft Azure Security Technologies
Course Duration: 4 Days
Passing Score: 700 or greater