Secure Azure Services and Workloads with Microsoft Defender for Cloud Regulatory Compliance Controls SC-5002 Objectives

Key Point of Training Programs

• Secure Azure Services and Workloads with Microsoft Defender for Cloud Regulatory Compliance Controls SC-5002 Outline

  Filter network traffic with a network security group using the Azure portal

  Learn to filter network traffic using Network Security Groups (NSGs) in the Azure portal.

  - Understand how to create, configure, and apply NSGs for improved network security.
  - Azure resource group
  - Azure Virtual Network
  - How network security groups filter network traffic
  - Application security groups
  - Exercise Create a virtual network infrastructure
  - Knowledge check
  - Summary

  Create a Log Analytics workspace for Microsoft Defender for Cloud

  Discover how to create a Log Analytics workspace in the Azure portal for Microsoft Defender for Cloud.

  - Improve data collection and security analysis.
  - Defender for Cloud monitoring components
  - Exercise Create a workspace
  - Knowledge check
  - Summary

  Set up Microsoft Defender for Cloud

  Implement Microsoft Defender for Cloud using the Azure portal.

  - Strengthen security and threat detection in your Azure environment.
  - Security posture
  - Workload protections
  - Deploy Microsoft Defender for Cloud
  - Exercise Enable Defender for Cloud on your Azure subscription
  - Azure Arc
  - Microsoft cloud security benchmark
  - Configure Microsoft Defender for Cloud policies
  - Exercise Enable just-in-time access on Virtual Machines
  - Knowledge check
  - Summary

  Configure and integrate a Log Analytics agent and workspace in Defender for Cloud

  Configure and integrate a Log Analytics agent with a workspace in Defender for Cloud via the Azure portal.

  - Boost security analysis.
  - Collect data from your workloads with the Log Analytics agent
  - Configure the Log Analytics agent and workspace
  - Exercise Collect data from your workloads with the Log Analytics agent
  - Knowledge check
  Summary

  Configure Azure Key Vault networking settings

  Learn to configure Azure Key Vault networking settings via the Azure portal.

  - Ensure secure and controlled access to stored secrets.
  - Azure Key Vault basic concepts
  - Best practices for Azure Key Vault
  - Configure Azure Key Vault firewalls and virtual networks
  - Exercise Configure Key Vault firewall and virtual networks
  - Exercise Configure Azure Key Vault recovery management with soft delete and purge protection
  - Knowledge check
  - Summary

  Connect an Azure SQL server using an Azure Private Endpoint using the Azure portal

  Securely connect an Azure SQL server via Azure Private Endpoint in the Azure portal.

  - Enhance data communication security.
  - Azure Private Endpoint
  - Azure Private Link
  - Exercise Deploy a virtual machine to test connectivity privately and securely to the SQL server across the private endpoint
  - Knowledge check
  - Summary

• Secure Azure Services and Workloads with Microsoft Defender for Cloud Regulatory Compliance Controls SC-5002 Format

  In-Person

  Online

• Secure Azure Services and Workloads with Microsoft Defender for Cloud Regulatory Compliance Controls SC-5002 Prerequisites

  - Practical experience in administration of Microsoft Azure and hybrid environments.
  - Strong familiarity with compute, network, and security in Azure, as well as Microsoft Entra ID.
  - Familiarity with security management and vulnerability remediation techniques.
  - Knowledge of threat modelling and implementation of threat protection measures.