Paths
Planning Microsoft Azure Identity and Security
No modern computing solution is complete without a strong focus on identity and security. In this path, you’ll learn how to design the core elements of Microsoft Azure Identity and Security.
What you will learn
- How to design identity management
- How to design authorization, authentication, and auditing (AAA)
- How to design an identity monitoring process
Pre-requisites
This path is intended for intermediate learners, and prior knowledge of virtual machines, cloud computing fundamentals, and solution architecture is required.
Beginner
The courses in this section will teach you the fundamentals for designing identity and security in Azure.
Design Governance and Identity Management in Microsoft Azure
3h 43m
Description
Identity has replaced the network as the perimeter for organizations, and having a strong identity plan is critical as cloud services become core to every organization. In this course, Design Governance and Identity Management in Microsoft Azure, you will gain the foundational knowledge necessary to utilize Azure AD to enable a highly secure identity that can be leveraged across your organization’s services and those applications provided externally. First, you will learn the key concepts of cloud authentication and the basics of Azure AD. Next, you will discover key technologies to help design a first-class identity management approach, including groups, roles, and conditional access. Finally, you will explore how to lighten up services for end users via a number of end-user experiences. When you’re finished with this course, you will have the skills and knowledge of cloud identity and Azure AD needed to design a secure and functional cloud identity solution that integrates into existing directories.
Table of contents
- Course Overview
- Introduction to Identity
- Azure AD Overview
- Using Roles and Access Control with Azure AD
- End User Self-service Capabilities
- Governance in Azure
Intermediate
These intermediate courses will take you through some of the more intricate elements of designing identity and security, including Authentication, Authorization, and Auditing.
Design Authentication for Microsoft Azure
3h 6m
Description
Identifying the right way to enable authentication across cloud services initially can be very complex with no clear answer. In this course, Design Authentication for Microsoft Azure, you will learn foundational knowledge for utilizing Azure AD for your cloud identity and authentication requirements. First, you will learn about authentication in the cloud and the use of tokens. Next, you will discover the types of authentication available for users in Azure AD. Finally, you will explore how to leverage Azure for authentication in a range of scenarios. When you’re finished with this course, you will have the skills and knowledge of authentication with Azure AD needed to provide your users, partners, and customers access to cloud services while ensuring the highest levels of security.
Table of contents
- Course Overview
- Introducing Authentication
- Azure AD Authentication Options for Users
- Authentication Requirements for Different Scenarios
Design Authorization for Microsoft Azure
2h 24m
Description
Authorization can be a very complex topic when looking at leveraging services across clouds via a centralized identity. In this course, Designing Authorization for Microsoft Azure, you will learn foundational knowledge of authorization with Azure and Azure AD. First, you will learn the key concepts around delegated authorization. Next, you will discover the authorization capabilities for Azure and Azure AD. Finally, you will explore how to integrate applications with Azure AD and control the delegation. When you’re finished with this course, you will have the skills and knowledge of authorization in Azure AD needed to enable you to securely and efficiently leverage Azure and other cloud services in a seamless manner.
Table of contents
- Course Overview
- Authorization Foundation
- Authorization with Azure Resource Manager and Azure AD
Design Auditing for Microsoft Azure
2h 34m
Description
Auditing performed actions and deployed configuration is challenging, and when leveraging the cloud it can be very difficult to understand how to audit effectively. In this course, Design Auditing for Microsoft Azure, you will learn the foundational knowledge necessary to meet the full range of auditing requirements utilizing Azure services. First, you will learn common auditing requirements. Next, you will discover how to gain insight into Azure services and how to effectively interpret and respond to audit conditions. Finally, you will explore how to ensure configuration compliance within Azure. When you’re finished with this course, you will have the skills and knowledge of audit-related technologies needed to ensure compliance and insight for services deployed in Azure.
Table of contents
- Course Overview
- Auditing Foundation
- Auditing in Azure
- Auditing Azure Data Plane
Advanced
n this section, you’ll get the opportunity to explore the more complicated areas of designing identity and security, including designing for risk prevention and designing monitoring strategies.
Design for Risk Prevention in Microsoft Azure
2h 22m
Description
Risk keeps every organization awake at night, and when embracing the cloud the initial perception is that risk will be increased. In this course, Design for Risk Prevention in Microsoft Azure, you’ll gain the ability to not only identify new risk considerations and how to mitigate them, but also how to actually lower the organization’s overall risk through Azure solutions. First, you will learn some basics about types of risk and risk management. Next, you will discover how to mitigate the risks around identity. Finally, you will explore how to identify and address risks related to Azure resources and data. When you’re finished with this course, you will have the skills and knowledge of risk management using Azure services needed to bring risk to an organizationally acceptable level using Microsoft cloud solutions.
Table of contents
- Course Overview
- An Overview of Risk
- Managing Identity Risk with Azure AD
- Managing Azure Resource Risk
- Managing Data in Azure Risk
Design a Monitoring Strategy for Identity and Security in Microsoft Azure
1h 39m
Description
Monitoring an on-premises identity solution can be complex, and when you extend identity into the cloud it can be daunting to understand what and how to monitor. In this course, Design a Monitoring Strategy for Identity and Security in Microsoft Azure, you will gain the ability to monitor a complete hybrid identity solution that includes Azure AD. First, you will learn monitoring considerations for on-premises Active Directory and Azure-based solutions. Next, you will discover how to monitor components such as Azure AD Connect. Finally, you will explore how to monitor the health and security of Azure AD. When you’re finished with this course, you will have the skills and knowledge of monitoring hybrid identity using Azure services needed to ensure the security and health of your identity solution.
Table of contents
- Course Overview
- Understanding Hybrid Identity
- Monitoring Active Directory
- Monitoring Azure AD Connect and Hybrid Components
- Monitoring Azure AD