Paths
Managing Microsoft Azure Identity and Security
No cloud solution can be complete without a strong focus on security, and on managing the identities of the individuals who will use and manage your cloud resources. This path... Read more
What you will learn
- How to manage access to your MS Azure subscription
- How to manage identity in MS Azure Active Directory
- How to implement advanced MS Azure security services
Pre-requisites
This path is intended for novice learners, and prior knowledge of virtual machines, cloud computing fundamentals, and server administration is required.
Beginner
The courses in this section will teach you the fundamentals for identity and security, which focus on resource groups.
Using Microsoft Azure Resource Groups
1h 40m
Description
Microsoft Azure offers numerous helpful resources. However, managing all these resources can be daunting. In this course, Using Microsoft Azure Resource Groups, you will gain the ability to manage and secure your resources. First, you will learn how to set up resource groups. Next, you will discover the tools available for you to safeguard and fully utilize your resources. Finally, you will explore how to move, monitor, and control your resource groups. When you are finished with this course, you will have the skills and knowledge of resource groups that will help you properly utilize your Azure resources.
Table of contents
- Course Overview
- Configuring Resource Groups
- Securing and Controlling Resource Groups
- Maintaining Resource Groups
Intermediate
These intermediate courses will take you through some of the more intricate elements within identity and security, focusing on identity management and information protection.
Managing Microsoft Azure Subscriptions
2h 8s
Description
Managing Microsoft Azure costs and resource management delegation can save companies money. In this course, Managing Microsoft Azure Subscriptions, you'll gain the knowledge required to control cloud resource creation and management while minimizing costs. First, you'll learn about resource tagging and how Microsoft Azure policies provide granular resource management control. Next, you'll learn how to budget, track, and reduce Microsoft Azure expenditures using a variety of methods. Finally, you'll gain insight as to how role-based access control facilitates delegated administration and how Microsoft Azure resource providers add new cloud features. By the end of this course, you’ll know which tools you can use to effectively manage Azure resources and costs.
Table of contents
- Course Overview
- Configuring Microsoft Azure Policy
- Configure Resource Tagging and Cost Center Spending Limits
- Assign Role-based Access Control
- Manage Microsoft Azure Resource Providers
Implementing and Managing Microsoft Azure Multi-factor Authentication
5h 2m
Description
Username and password authentication is susceptible to many forms of attack, and multi-factor authentication offers a way to mitigate this threat. Azure multi-factor authentication is a global service that allows you to add a second factor of authentication to your on-premises and cloud based systems using a hardware device already in the hands of your users and customers - their mobile phone. In this course, Implementing and Managing Microsoft Azure Multi-factor Authentication, you'll learn how to configure Azure MFA in the cloud and on-premises. First, you'll discover the self-service options available to users and business administrators, and how to integrate Azure MFA with a variety of technologies and applications. Next, you'll explore the configuration options to integrate Azure MFA with your existing systems. Finally, you'll see how to protect cloud-based applications with MFA and Conditional Access Policies. By the end of this course, you'll know how to deploy, configure, and monitor Azure MFA, in the cloud and on-premises.
Table of contents
- Course Overview
- Understanding Azure Multi-factor Authentication
- Configuring Azure MFA in the Cloud
- Implementing Azure MFA Server On-premises
- Integrating Azure MFA with On-premises Systems
- The MFA User Portal for Self-service and Administration
- Configuring the Microsoft Authenticator and OATH Clients
- Protecting Cloud-based Applications
- Monitoring and Reporting with Azure MFA
Managing Identities in Microsoft Azure Active Directory
2h 18m
Description
Securing access and authorization to your applications, data, and resources is critical to protecting your enterprise assets. You must provide proper access to users and devices when they need it, without being overly permissive. Microsoft Azure Active Directory can be leveraged to achieve those goals. In this course, Managing Identities in Microsoft Azure Active Directory, you will learn the fundamentals of managing an Azure Active Directory environment. First, you will learn the basics of an Azure Active Directory tenant. Next, you will explore how to manage users, groups, devices, and applications. Finally, you will examine how to leverage special features like Conditional Access and Self-service Password Reset to give your users a modern, protected experience. By the end of this course, you will be able to manage your Azure Active Directory environment effectively, use advanced features to improve the end-user experience, and provide higher security to your organization.
Table of contents
- Course Overview
- Configuring Directories in Azure AD
- Managing Azure Active Directory Users and Groups
- Managing Azure AD Devices and Applications
- Managing Access in Azure AD
Managing Microsoft Azure Information Protection
1h 42m
Description
Enforcing and applying data protection and classification are key components of a data governance strategy. Organizations are under increased pressure to ensure that sensitive information is labeled and secured properly, meeting stringent compliance regulations and protecting the privacy of customers and the organization itself. In this course, Managing Microsoft Azure Information Protection, you'll learn how to properly leverage the Azure Information Protection Service from Microsoft to meet these new requirements. First, you'll create and manage classifications using labels. Next, you’ll grant users access to labels and enforce settings. Finally, you'll delegate access and monitor the Azure Information Protection solution. By the end of this course, you'll be able to manage your Azure Information Protection environment effectively to make your organization more secure and protect your most valuable asset, information.
Table of contents
- Course Overview
- Introducing Azure Information Protection
- Creating Azure Information Protection Classifications and Labels
- Creating Azure Information Protection Policies
- Managing Azure Information Protection Keys
- Controlling Azure Information Protection Access
- Monitoring Azure Information Protection
Advanced
In this section, you’ll get the opportunity to explore the more complicated areas in identity and security, focused on advanced and hybrid identity and information protection.
Implementing Microsoft Azure Privileged Identity Management
1h 29m
Description
Cybercriminals are relentless when it comes to finding and compromising their targets’ privileged credentials to gain unfettered access to critical assets. In this course, Implementing Microsoft Azure Privileged Identity Management, you will receive the most up-to-date knowledge on how to mitigate these security risks and to achieve compliance by securing, controlling, monitoring, analyzing, and governing privileged access on Azure AD, Azure resources, and Microsoft online services. First, you will learn how to quickly enable Microsoft PIM in your Azure tenant along with the licensing requirements to do so. Next, you will explore the concept of just in time access and just enough administration that will help you configure Microsoft PIM properly. Finally, you will get all the knowledge you need to enable workflow approval and access reviews along with some best practices that will help you properly manage PIM to meet your business needs. When you are finished with this course, you will have the skills and knowledge you need to enhance your overall security and compliance with more efficient administration and governance of privileged access.
Table of contents
- Course Overview
- Introducing Azure Privileged Identity Management
- Enabling Azure Privileged Identity Management
- Configuring Just in Time Access
- Configuring Time-bound Access
- Configuring Permanent Access
- Implementing Approval Workflows
- Exploring Privileged Identity Management Roles
- Configuring PIM Management Access
- Configuring PIM Access Review and Auditing
Microsoft Azure Hybrid Identity – Overview
2h 16m
Description
The world which we live in is rapidly changing for both us and the people we support. In this course, Microsoft Azure Hybrid Identity – Overview, you will learn how to embrace these changes and extend your active directory to the cloud. This will give you the ability to incorporate cloud computing within your organization. First, you will learn how to deploy an Azure AD domain. Next, you will discover how to register devices and provide applications from the cloud and on-premises to users anywhere they go. Finally, you will explore how to keep your hybrid environment secure and functioning properly. When you’re finished with this course, you will have the skills and knowledge to connect your on-premises Active Directory up to the cloud.
Table of contents
- Course Overview
- Benefiting from Azure Hybrid Identity
- Deploying Azure AD Connect
- Setting up Users and Applications for Hybrid Identity
- Managing an Azure Hybrid Identity
Implementing Managed Identities for Microsoft Azure Resources
1h 27m
Description
Security is job zero for everyone in the field of Information Technology these days, whether you work as a Developer or as a Solutions Architect. In this course, Implementing Managed identities for Microsoft Azure Resources, you’ll learn how to leverage managed identities to securely connect to instances of Microsoft Azure services that trust Azure AD authentication. First, you’ll learn the fundamentals of managed identities and what problem they solve. Next, you’ll explore how to create and enable managed identities for supported Azure services and connect to various Azure services without the need to store any credentials in your application code. Finally, you’ll discover how secure connections are established when you use managed identities. When you’re finished with this course, you’ll have foundational knowledge of managed identities for Azure resources that will help you as you move forward to build credential free and secure cloud-native applications on the Microsoft Azure platform.
Table of contents
- Course Overiew
- Introducing Managed Identities for Azure Resources
- Configure Managed Identities for Azure Resources
- Configure a Secure Connection Using Managed Identity
Managing Microsoft Azure Role Based Access Control
1h 39m
Description
At the core of Azure Role Based Access Control is a thorough knowledge of assigning least privilege in Azure. In this course, Managing Microsoft Azure Role Based Access Control, you will learn how to understand all aspects of Azure RBAC. First, you will discover how to implement RBAC to mediate administrative access to Azure resources at the management group, subscription, resource group, and resource level. Next, you will explore how to audit RBAC activity. Finally, you will learn how to create and validate custom roles as well as how to troubleshoot your RBAC deployment. When you are finished with this course, you will have a foundational knowledge of Azure Role Based Access Control that will help you as you move forward to secure Azure Resources. Software required: Standards Compliant Browser.
Table of contents
- Course Overview
- Course and Microsoft Azure Role Based Access Control Introduction
- Azure RBAC Roles
- Auditing RBAC Activity and Configuring Management Access
- Azure Policies and RBAC
- RBAC Compliance with Azure Policy
- Create Custom Roles
- Validate Custom Role Definitions
- Troubleshooting RBAC