Architect secure infrastructure in Azure

In this module, you will:

• View security alerts in Microsoft Defender for Cloud
• Define an incident response plan
• Use a Workflow automation to automate a security response

In this module, you will:

• Determine which encryption method is best for your VM
• Encrypt existing virtual machine disks using the Azure portal
• Encrypt existing virtual machine disks using PowerShell
• Modify Azure Resource Manager templates to automate disk encryption on new VMs

In this module, you will:

• Explore what types of information can be stored in Azure Key Vault
• Create an Azure Key Vault and use it to store secret configuration values
• Enable secure access to the vault from an Azure App Service web app with managed identities for Azure resources
• Implement a web application that retrieves secrets from the vault

In this module, you will:

• Verify access to resources for yourself and others
• Grant access to resources
• View activity logs of Azure RBAC changes

In this module, you will:

• Implement TLS encryption between your users and Application Gateway
• Implement TLS encryption between Application Gateway and your web servers

In this module, you will:

• Identify the types of data that your organization is using and the security requirements for that data
• Identify the encryption capabilities for services on Azure

In this module, you will:

• Control network access to your Azure SQL Database using firewall rules
• Control user access to your Azure SQL Database using authentication and authorization
• Protect your data in transit and at rest
• Audit and monitor your Azure SQL Database for access violations

In this module, you will:

• Store Azure audit activity and sign-in activity logs in Azure Monitor.
• Create alerts for security events in Azure Monitor.
• Create and view dashboards to support improved monitoring.

• Introduction
• View security alerts
• Respond to alerts
• Define a security incident response plan
• Use a workflow automation to automate responses
• Exercise - Configure a Playbook for a security event
• Summary

• Introduction
• Encryption options for protecting Windows and Linux VMs
• Encrypt existing VM disks
• Exercise - Encrypt existing VM disks
• Automate secure VM deployments by adding encryption to Azure Resource Manager templates
• Exercise - Use a Resource Manager template to decrypt the VM
• Knowledge check
• Summary

• Introduction
• What is Azure Key Vault?
• Exercise - Create a Key Vault and store secrets
• Vault authentication with managed identities for Azure resources
• Exercise - Access secrets stored in Azure Key Vault
• Exercise - Configure, deploy, and run your app in Azure
• Summary

• Introduction
• What is Azure RBAC?
• Knowledge check - What is Azure RBAC?
• Exercise - List access using Azure RBAC and the Azure portal
• Exercise - Grant access using Azure RBAC and the Azure portal
• Exercise - View activity logs for Azure RBAC changes
• Knowledge check - Using Azure RBAC
• Summary

• Introduction
• Application Gateway and encryption
• Configure back-end pools for encryption
• Exercise - Configure back-end pools for encryption
• Configure an Application Gateway listener for encryption
• Exercise - Configure an Application Gateway listener for encryption
• Summary

• Introduction
• Classify your data and protect confidential information
• Secure data at rest by using Azure Storage Service Encryption
• Secure data at rest in Azure SQL Database and Azure Cosmos DB
• Keep your keys and secrets safe by using Azure Key Vault
• Summary

• Introduction
• Exercise - Set up sandbox environment
• Exercise - Restrict network access
• Exercise - Control who can access your database
• Exercise - Secure your data in transit, at rest, and on display
• Exercise - Monitor your database
• Knowledge check
• Summary

• Introduction
• Use sign-in, audit, and provisioning logs to detect suspicious activity
• Integrate activity logs with Azure Monitor logs
• Set up reports and dashboards to visualize the information
• Exercise - Set up reports and dashboards to visualize the information
• Summary