Manage Identity and Access

 

Configure Azure Active Directory for Workloads

• Create App Registration

• Configure App Registration Permission Scopes

• Manage App Registration Permission Consent

• Configure Multi-Factor Authentication Settings

• Manage Azure AD Directory Groups

• Manage Azure AD Users

• Install and Configure Azure AD Connect

• Configure Authentication Methods

• Implement Conditional Access Policies

• Configure Azure AD Identity Protection

 

Manage Azure Active Directory Identities

• Configure Security for Service Principals

• Manage Azure AD Directory Groups

• Manage Azure AD Users

• Configure Password Writeback

• Configure Authentication Methods Including Password Hash and Pass Through

 

Authentication (PTA), OAuth, and Passwordless

• Transfer Azure Subscriptions between Azure AD Tenants

 

Configure Secure Access by using Azure AD

• Monitor Privileged Access for Azure AD Privileged Identity Management (PIM)

• Configure Access Reviews

• Activate and Configure PIM

• Implement Conditional Access Policies Including Multi-Factor Authentication (MFA) · Configure Azure AD Identity Protection

 

Manage application access

• Create App Registration

• Configure App Registration Permission Scopes

• Manage App Registration Permission Consent

• Manage API Access to Azure Subscriptions and Resources

•  

• Manage Access Control

• Configure Subscription and Resource Permissions

• Configure Resource Group Permissions

• Configure Custom RBAC Roles

• Identify the Appropriate Role

• Apply Principle of Least Privilege

• Interpret Permissions

• Check Access

 

Configure Security for Storage

• Configure Access Control for Storage Accounts

• Configure Key Management for Storage Accounts

• Configure Azure AD Authentication for Azure Storage

• Configure Azure AD Domain Services Authentication for Azure Files

• Create and Manage Shared Access Signatures (SAS)

• Create a Shared Access Policy for a Blob or Blob Container

• Configure Storage Service Encryption

 

Configure security for databases

• Enable Database Authentication

• Enable Database Auditing

• Configure Azure SQL Database Advanced Threat Protection

• Implement Database Encryption

• Implement Azure SQL Database Always Encrypted

 

Configure and manage Key Vault

• Manage Access to Key Vault

• Manage Permissions to Secrets, Certificates, and Keys

• Configure RBAC Usage in Azure Key Vault

• Manage Certificates

• Manage Secrets

• Configure Key Rotation

• Backup and Restore of Key Vault Items

Implement Platform Protection

 

Implement Advanced Network Security

• Secure the Connectivity of Virtual Networks (VPN authentication, Express Route Encryption)

• Configure Network Security Groups (NSGs) and Application Security Groups (ASGs)

• Create and Configure Azure Firewall

• Configure Azure Front Door service as an Application Gateway

• Configure a Web Application Firewall (WAF) on Azure Application Gateway

• Configure Azure Bastion

• Configure a Firewall on a Storage Account, Azure SQL, KeyVault, or App Service

• Implement Service Endpoints

• implement DDoS

 

Configure Advanced Security for Compute

• Configure Endpoint Protection

• Configure and Monitor System Updates for VMs

• Configure Authentication for Azure Container Registry

• Configure Security for Different Types of Containers

• Implement Vulnerability Management

• Configure Isolation for AKS

• Configure Security for Container Registry

• Implement Azure Disk Encryption

• Configure Authentication and Security for Azure App Service

• Configure SSL/TLS Certs

• Configure Authentication for Azure Kubernetes Service

• Configure automatic updates

 

Manage Security Operations

 

Monitor Security by using Azure Monitor

• Create and Customize Alerts

• Monitor Security Logs by using Azure Monitor

• Configure Diagnostic Logging and Log Retention

 

Monitor Security by using Azure Security Center

• Evaluate Vulnerability scans from Azure Security Center

• configure Just in Time VM access by using Azure Security Center

• configure centralized policy management by using Azure Security Center

• configure compliance policies and evaluate for compliance by using Azure Security Center

 

Monitor security by using Azure Sentinel

• create and customize alerts

• configure data sources to Azure Sentinel

• evaluate results from Azure Sentinel

• configure a playbook for a security event by using Azure Sentinel

 

Configure security policies

• configure security settings by using Azure Policy

•  configure security settings by using Azure Blueprint