Module 1: Build an overall security strategy and architecture
Learn how to build an overall security strategy and architecture.
Lessons
-
Introduction
-
Zero Trust overview
-
Develop Integration points in an architecture
-
Develop security requirements based on business goals
-
Translate security requirements into technical capabilities
-
Design security for a resiliency strategy
-
Design a security strategy for hybrid and multi-tenant environments
-
Design technical and governance strategies for traffic filtering and segmentation
-
Understand security for protocols
-
Exercise: Build an overall security strategy and architecture
-
Knowledge check
-
Summary
After completing this module, students will be able to:
-
Develop Integration points in an architecture
-
Develop security requirements based on business goals
-
Translate security requirements into technical capabilities
-
Design security for a resiliency strategy
-
Design security strategy for hybrid and multi-tenant environments
-
Design technical and governance strategies for traffic filtering and segmentation
Module 2: Design a security operations strategy
Learn how to design a security operations strategy.
Lessons
-
Introduction
-
Understand security operations frameworks, processes, and procedures
-
Design a logging and auditing security strategy
-
Develop security operations for hybrid and multi-cloud environments
-
Design a strategy for Security Information and Event Management (SIEM) and Security Orchestration,
-
Evaluate security workflows
-
Review security strategies for incident management
-
Evaluate security operations strategy for sharing technical threat intelligence
-
Monitor sources for insights on threats and mitigations
After completing this module, students will be able to:
-
Design a logging and auditing security strategy
-
Develop security operations for hybrid and multi-cloud environments.
-
Design a strategy for Security Information and Event Management (SIEM) and Security Orchestration, A
-
Evaluate security workflows.
-
Review security strategies for incident management.
-
Evaluate security operations for technical threat intelligence.
-
Monitor sources for insights on threats and mitigations.
Module 3: Design an identity security strategy
Learn how to design an identity security strategy.
Lessons
-
Introduction
-
Secure access to cloud resources
-
Recommend an identity store for security
-
Recommend secure authentication and security authorization strategies
-
Secure conditional access
-
Design a strategy for role assignment and delegation
-
Define Identity governance for access reviews and entitlement management
-
Design a security strategy for privileged role access to infrastructure
-
Design a security strategy for privileged activities
-
Understand security for protocols
After completing this module, students will be able to:
-
Recommend an identity store for security.
-
Recommend secure authentication and security authorization strategies.
-
Secure conditional access.
-
Design a strategy for role assignment and delegation.
-
Define Identity governance for access reviews and entitlement management.
-
Design a security strategy for privileged role access to infrastructure.
-
Design a security strategy for privileged access.
Module 4: Evaluate a regulatory compliance strategy
Learn how to evaluate a regulatory compliance strategy.
Lessons
-
Introduction
-
Interpret compliance requirements and their technical capabilities
-
Evaluate infrastructure compliance by using Microsoft Defender for Cloud
-
Interpret compliance scores and recommend actions to resolve issues or improve security
-
Design and validate implementation of Azure Policy
-
Design for data residency Requirements
-
Translate privacy requirements into requirements for security solutions
After completing this module, students will be able to:
-
Interpret compliance requirements and their technical capabilities
-
Evaluate infrastructure compliance by using Microsoft Defender for Cloud
-
Interpret compliance scores and recommend actions to resolve issues or improve security
-
Design and validate implementation of Azure Policy
-
Design for data residency requirements
-
Translate privacy requirements into requirements for security solutions
Module 5: Evaluate security posture and recommend technical strategies to manage risk
Learn how to evaluate security posture and recommend technical strategies to manage risk.
Lessons
-
Introduction
-
Evaluate security postures by using benchmarks
-
Evaluate security postures by using Microsoft Defender for Cloud
-
Evaluate security postures by using Secure Scores
-
Evaluate security hygiene of Cloud Workloads
-
Design security for an Azure Landing Zone
-
Interpret technical threat intelligence and recommend risk mitigations
-
Recommend security capabilities or controls to mitigate identified risks
After completing this module, students will be able to:
-
Evaluate security postures by using benchmarks
-
Evaluate security postures by using Microsoft Defender for Cloud
-
Evaluate security postures by using Secure Scores
-
Evaluate security hygiene of Cloud Workloads
-
Design security for an Azure Landing Zone
-
Interpret technical threat intelligence and recommend risk mitigations
-
Recommend security capabilities or controls to mitigate identified risks
Module 6: Understand architecture best practices and how they are changing with the Cloud
Learn about architecture best practices and how they are changing with the Cloud.
Lessons
-
Introduction
-
Plan and implement a security strategy across teams
-
Establish a strategy and process for proactive and continuous evolution of a security strategy
-
Understand network protocols and best practices for network segmentation and traffic filtering
After completing this module, students will be able to:
-
Describe best practices for network segmentation and traffic filtering.
-
Plan and implement a security strategy across teams.
-
Establish a strategy and process for proactive and continuous evaluation of security strategy.
Module 7: Design a strategy for securing server and client endpoints
Learn how to design a strategy for securing server and client endpoints.
Lessons
-
Introduction
-
Specify security baselines for server and client endpoints
-
Specify security requirements for servers
-
Specify security requirements for mobile devices and clients
-
Specify requirements for securing Active Directory Domain Services
-
Design a strategy to manage secrets, keys, and certificates
-
Design a strategy for secure remote access
-
Understand security operations frameworks, processes, and procedures
-
Understand deep forensics procedures by resource type
After completing this module, students will be able to:
-
Specify security baselines for server and client endpoints
-
Specify security requirements for servers
-
Specify security requirements for mobile devices and clients
-
Specify requirements for securing Active Directory Domain Services
-
Design a strategy to manage secrets, keys, and certificates
-
Design a strategy for secure remote access
-
Understand security operations frameworks, processes, and procedures
-
Understand deep forensics procedures by resource type
Module 8: Design a strategy for securing PaaS, IaaS, and SaaS services
Learn how to design a strategy for securing PaaS, IaaS, and SaaS services.
Lessons
-
Introduction
-
Specify security baselines for PaaS services
-
Specify security baselines for IaaS services
-
Specify security baselines for SaaS services
-
Specify security requirements for IoT workloads
-
Specify security requirements for data workloads
-
Specify security requirements for web workloads
-
Specify security requirements for storage workloads
-
Specify security requirements for containers
-
Specify security requirements for container orchestration
After completing this module, students will be able to:
-
Specify security baselines for PaaS, SaaS and IaaS services
-
Specify security requirements for IoT, data, storage, and web workloads
-
Specify security requirements for containers and container orchestration
Module 9: Specify security requirements for applications
Learn how to specify security requirements for applications.
Lessons
-
Introduction
-
Understand application threat modeling
-
Specify priorities for mitigating threats to applications
-
Specify a security standard for onboarding a new application
-
Specify a security strategy for applications and APIs
After completing this module, students will be able to:
-
Specify priorities for mitigating threats to applications
-
Specify a security standard for onboarding a new application
-
Specify a security strategy for applications and APIs
Module 10: Design a strategy for securing data
Learn how to design a strategy for securing data.
Lessons
-
Introduction
-
Prioritize mitigating threats to data
-
Design a strategy to identify and protect sensitive data
-
Specify an encryption standard for data at rest and in motion
After completing this module, students will be able to:
-
Prioritize mitigating threats to data
-
Design a strategy to identify and protect sensitive data
-
Specify an encryption standard for data at rest and in motion
