Microsoft Azure Security Technologies (AZ-500) Cert Prep: 3 Manage Security Operations

Start your preparations for the “Manage security operations” domain of the AZ-500 exam.

Introduction

• About the manage security operations domain
• What you should know
• Lab setup

1. Configure Centralized Policy Management

• Configure a custom security policy
• Create a policy initiative
• Configure security settings and auditing using Azure Policy

2. Configure and Manage Threat Protection

• Configure Azure Defender for servers
• Evaluate vulnerability scans from Azure Defender
• Configure Azure Defender for SQL
• Use the Microsoft Threat Modeling Tool

3. Configure and Manage Security Monitoring

• Create and customize alert rules using Azure Monitor
• Diagnostic logging and log retention using Azure Monitor
• Monitor security logs using Azure Monitor
• Create and customize alert rules in Azure Sentinel
• Configure connectors in Azure Sentinel
• Evaluate alerts and incidents in Azure Sentinel
• Configure a playbook

Conclusion

• Next steps