Secure your cloud data

After completing this module, you'll be able to:

• Strengthen your security posture and protect against threats by using Azure Security Center.
• Collect and act on security data from many different sources by using Azure Sentinel.
• Store and access sensitive information such as passwords and encryption keys securely in Azure Key Vault.
• Manage dedicated physical servers to host your Azure VMs for Windows and Linux by using Azure Dedicated Host.

In this module, you will:

• Use Microsoft Defender for Cloud
• Verify your application's inputs and outputs
• Store your secrets into Key Vault
• Ensure you are using the latest version of your framework, and its security features
• Validate that your program dependencies and libraries are safe to use

In this module, you will:

• Learn how to classify your data
• Configure your data retention requirements
• Explore data ownership and sovereignty

In this module you will:

• Explore the Azure Data Lake enterprise-class security features.
• Understand storage account keys.
• Understand shared access signatures.
• Understand transport-level encryption with HTTPS.
• Understand Advanced Threat Protection.
• Control network access.

In this module, you will:

• Explore proper usage of Azure Key Vault
• Manage access to an Azure Key Vault
• Explore certificate management with Azure Key Vault
• Configure a Hardware Security Module Key-generation solution

In this module, you will:

• Verify access to resources for yourself and others
• Grant access to resources
• View activity logs of Azure RBAC changes

In this module, you will:

• Control network access to your Azure SQL Database using firewall rules
• Control user access to your Azure SQL Database using authentication and authorization
• Protect your data in transit and at rest
• Audit and monitor your Azure SQL Database for access violations

• Introduction
• Protect against security threats by using Azure Security Center
• Detect and respond to security threats by using Azure Sentinel
• Store and manage secrets by using Azure Key Vault
• Exercise - Manage a password in Azure Key Vault
• Host your Azure virtual machines on dedicated physical servers by using Azure Dedicated Host
• Knowledge check
• Summary

• Introduction
• Microsoft Defender for Cloud
• Inputs and Outputs
• Secrets in Key Vault
• Framework Updates
• Safe Dependencies
• Conclusion

• Introduction
• Classify your data at rest, in process, and in transit
• Exercise - Classify an Azure SQL Database
• Explore data recovery, retention, and disposal
• Understand data sovereignty
• Summary

• Introduction
• Explore Azure Storage security features
• Understand storage account keys
• Understand shared access signatures
• Control network access to your storage account
• Understand advanced threat protection for Azure Storage
• Explore Azure Data Lake Storage security features
• Summary

• Introduction
• Guidelines for using Azure Key Vault
• Manage access to secrets, certificates, and keys
• Exercise - store secrets in Azure Key Vault
• Manage certificates
• Summary

• Introduction
• What is Azure RBAC?
• Knowledge check - What is Azure RBAC?
• Exercise - List access using Azure RBAC and the Azure portal
• Exercise - Grant access using Azure RBAC and the Azure portal
• Exercise - View activity logs for Azure RBAC changes
• Knowledge check - Using Azure RBAC
• Summary

• Introduction
• Exercise - Set up sandbox environment
• Exercise - Restrict network access
• Exercise - Control who can access your database
• Exercise - Secure your data in transit, at rest, and on display
• Exercise - Monitor your database
• Knowledge check
• Summary