SC-5002 – Secure Azure services and workloads with Microsoft Defender for Cloud regulatory compliance controls

About the Course

Learn how to secure Azure services and workloads using Microsoft Defender for Cloud and regulatory compliance controls. You configure network security, set up monitoring with Log Analytics, implement just-in-time access, and secure connectivity using private endpoints.

There are currently no scheduled sessions available for this course. However, feel free to contact us for more information or to inquire about upcoming sessions.

Questions about this? let our team answer them!

Course Outline

1. Examine Defender for Cloud regulatory compliance standards
• Regulatory compliance standards in Defender for Cloud
• Microsoft cloud security benchmark in Defender for Cloud
• Improve your regulatory compliance in Defender for Cloud

2. Enable Defender for Cloud on your Azure subscription
• Connect your Azure subscriptions

3. Filter network traffic with a network security group using the Azure portal
• Azure resource group
• Azure Virtual Network
• How network security groups filter network traffic
• Application security groups

4. Collect guest operating system monitoring data from Azure and hybrid virtual machines using Azure Monitor Agent
• Deploy the Azure Monitor Agent
• Collect data with Azure Monitor Agent

5. Explore just-in-time virtual machine access
• Understand just-in-time virtual machine access
• Enable just-in-time access on virtual machines

6. Configure Azure Key Vault networking settings
• Azure Key Vault basic concepts
• Best practices for Azure Key Vault
• Azure Key Vault network security
• Configure Azure Key Vault firewalls and virtual networks
• Azure Key Vault soft delete overview
• Virtual network service endpoints for Azure Key Vault

7. Connect an Azure SQL server using an Azure Private Endpoint using the Azure portal
• Azure Private Endpoint
• Azure Private Link

Course Details

Pre-requisites

• Microsoft Learn explicitly lists no prerequisites (“None”) for this learning path.

Target Audience

Candidates for this credential should be familiar with Azure infrastructure as a service (IaaS) and platform as a service (PaaS). They should have experience with security capabilities in Azure, along with a working knowledge of regulatory compliance standards.

Class Format

For online (live) format

There are currently no scheduled sessions available for this course. However, feel free to contact us for more information or to inquire about upcoming sessions.