# KodeKloud: Beta Courses Microsoft Azure Security Technologies (AZ-500) ## Microsoft Azure Security Technologies (AZ-500) ### Introduction - [Course Introduction](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Introduction/Course-Introduction/page.md): This course prepares you for the AZ-500 certification exam by exploring key aspects of Azure security technologies. - [Certification Details](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Introduction/Certification-Details/page.md): This article provides an overview of the AZ-500 certification topics, including identity management, secure networking, and security operations. ### Secure Azure solution with Azure Active Directory - [Explore Azure Active Directory features](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Secure-Azure-solution-with-Azure-Active-Directory/Explore-Azure-Active-Directory-features/page.md): This article examines the robust features of Azure Active Directory, showcasing its impact on security, access control, and innovation in digital identity management. - [Compare Azure AD vs Active Directory Domain Services](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Secure-Azure-solution-with-Azure-Active-Directory/Compare-Azure-AD-vs-Active-Directory-Domain-Services/page.md): This article examines the differences between Azure Active Directory and Active Directory Domain Services to help choose the right identity management solution. - [Investigate roles in Azure AD](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Secure-Azure-solution-with-Azure-Active-Directory/Investigate-roles-in-Azure-AD/page.md): This article explores the various roles in Azure Active Directory, detailing their specific permissions and management capabilities across different services. - [Deploy Azure AD Domain Services](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Secure-Azure-solution-with-Azure-Active-Directory/Deploy-Azure-AD-Domain-Services/page.md): This article provides an in-depth look at deploying Azure AD Domain Services, covering deployment specifics, limitations, advantages, and integration details. - [Azure AD DS and Self Managed AD DS](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Secure-Azure-solution-with-Azure-Active-Directory/Azure-AD-DS-and-Self-Managed-AD-DS/page.md): This guide explores deploying Active Directory Domain Services in the cloud using Azure AD Domain Services and Self-Managed Active Directory Domain Services. - [Deploy Azure AD DS](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Secure-Azure-solution-with-Azure-Active-Directory/Deploy-Azure-AD-DS/page.md): Learn to deploy Azure AD Domain Services using the Azure portal with step-by-step instructions for configuration, network integration, and joining a Windows Server VM. - [Create and manage Azure AD users](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Secure-Azure-solution-with-Azure-Active-Directory/Create-and-manage-Azure-AD-users/page.md): This guide explores managing users and groups in Azure Active Directory, focusing on user accounts, creation, deletion, and types of accounts available. - [Manage users with Azure AD groups](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Secure-Azure-solution-with-Azure-Active-Directory/Manage-users-with-Azure-AD-groups/page.md): This guide explores managing Azure Active Directory groups, including group types, membership options, and step-by-step instructions for creating and managing groups. - [Device Management in Azure AD](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Secure-Azure-solution-with-Azure-Active-Directory/Device-Management-in-Azure-AD/page.md): This lesson covers managing devices in Azure Active Directory, focusing on security policies, device identity, and access management features. - [Configure Azure AD administrative units](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Secure-Azure-solution-with-Azure-Active-Directory/Configure-Azure-AD-administrative-units/page.md): This lesson covers Azure AD Administrative Units for efficient management and control of organizational resources through delegation and role-based permissions. - [Implement Passwordless Authentication](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Secure-Azure-solution-with-Azure-Active-Directory/Implement-Passwordless-Authentication/page.md): This article explores implementing passwordless authentication in Azure Active Directory using methods like Windows Hello, Microsoft Authenticator, and FIDO2 Security Keys. ### Hybrid Identity - [Introduction](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Hybrid-Identity/Introduction/page.md): This article explores hybrid identity in Azure Active Directory, focusing on deploying Azure AD Connect and various authentication options for synchronized accounts. - [Deploy Azure AD connect](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Hybrid-Identity/Deploy-Azure-AD-connect/page.md): This article provides an overview of Azure AD Connect, focusing on its architecture, synchronization methods, and key features for confident deployment. - [Explore Authentication Options](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Hybrid-Identity/Explore-Authentication-Options/page.md): This article explores various authentication options in Azure AD Connect to help organizations choose the best strategy for their needs. - [Configure Password Hash Synchronization PHS](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Hybrid-Identity/Configure-Password-Hash-Synchronization-PHS/page.md): This article explains Password Hash Synchronization for securely synchronizing user credentials between on-premises Active Directory and Azure Active Directory. - [Implement Pass through Authentication PTA](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Hybrid-Identity/Implement-Pass-through-Authentication-PTA/page.md): This article explores the pass-through authentication method in Azure AD Connect, validating credentials in real time against on-premises Active Directory. - [Deploy Federation with Azure AD](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Hybrid-Identity/Deploy-Federation-with-Azure-AD/page.md): This article details the federation authentication method in Azure AD Connect, establishing trust between on-premises AD FS and Azure AD for seamless integration. - [Seamless SSO](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Hybrid-Identity/Seamless-SSO/page.md): This article discusses Seamless Single Sign-On with Azure AD, enhancing user experience and security in hybrid identity scenarios. - [Explore the authentication decision tree](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Hybrid-Identity/Explore-the-authentication-decision-tree/page.md): This comprehensive guide helps choose the optimal authentication method for your environment through a logical sequence of decision points. - [Configure password writeback](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Hybrid-Identity/Configure-password-writeback/page.md): This article explains how to configure Password Write Back for synchronizing password changes from Azure Active Directory to on-premises Active Directory. - [Azure AD Connect Demonstration](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Hybrid-Identity/Azure-AD-Connect-Demonstration/page.md): This guide covers deploying Azure AD Connect for hybrid identity, including setting up a Domain Controller and synchronizing on-premises users with Azure AD. ### Identity Protection - [Introduction](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Identity-Protection/Introduction/page.md): This article introduces a module on Identity Protection, focusing on safeguarding user identities through Azure AD security practices. - [Explore Azure AD identity protection](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Identity-Protection/Explore-Azure-AD-identity-protection/page.md): This article describes Azure AD Identity Protections features and benefits for detecting and responding to identity-related risks in real time. - [Configure risk event detections](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Identity-Protection/Configure-risk-event-detections/page.md): This guide explains risk events in Azure AD Identity Protection and provides examples of how risks are identified and managed. - [Implement user risk policy](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Identity-Protection/Implement-user-risk-policy/page.md): This article explains how to implement User Risk Policy in Azure AD Identity Protection to enhance security and manage user access based on risk levels. - [Implement sign in risk policy](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Identity-Protection/Implement-sign-in-risk-policy/page.md): This guide explains how to configure and activate the sign-in risk policy in Azure AD Identity Protection to enhance security against suspicious authentication attempts. - [Multi factor authentication in Azure AD](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Identity-Protection/Multi-factor-authentication-in-Azure-AD/page.md): This guide explains the importance of multi-factor authentication in Azure AD and how to implement it for enhanced security. - [Implement Azure AD conditional access](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Identity-Protection/Implement-Azure-AD-conditional-access/page.md): Guide to implementing Azure AD Conditional Access policies that evaluate sign-in signals to allow, require MFA, or block access, with portal walkthrough, testing tools, and best practices. - [Implement access reviews](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Identity-Protection/Implement-access-reviews/page.md): This guide explains the significance of Azure AD Access Reviews and details how to configure them using the Azure AD portal. ### Azure AD Privileged Identity Management - [Introduction](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Azure-AD-Privileged-Identity-Management/Introduction/page.md): This article focuses on Azure AD Privileged Identity Management, enhancing security posture and streamlining administrative processes. - [Explore the zero trust model](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Azure-AD-Privileged-Identity-Management/Explore-the-zero-trust-model/page.md): This article explores the Zero Trust security framework, emphasizing verification, least privilege access, and breach assumption to enhance organizational security. - [Azure AD Privileged Identity Management](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Azure-AD-Privileged-Identity-Management/Azure-AD-Privileged-Identity-Management/page.md): Azure AD Privileged Identity Management is a service for managing, controlling, and monitoring access to critical resources across various platforms. - [Configuring scope of PIM](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Azure-AD-Privileged-Identity-Management/Configuring-scope-of-PIM/page.md): This lesson demonstrates configuring the scope of Privileged Identity Management to enhance organizational security through Azure AD roles and Azure resources. - [Implement Privileged Identity Management](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Azure-AD-Privileged-Identity-Management/Implement-Privileged-Identity-Management/page.md): Learn to implement Privileged Identity Management in Azure, covering onboarding, configuration steps, and management through the Azure Portal. - [Exploring PIM Configuration settings](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Azure-AD-Privileged-Identity-Management/Exploring-PIM-Configuration-settings/page.md): This article explores advanced configuration settings for Privileged Identity Management in Azure, focusing on role activations, assignments, and security enhancements. ### Enterprise Governance - [Introduction](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Enterprise-Governance/Introduction/page.md): This lesson introduces a module on Enterprise Governance, covering key topics for managing and securing your Azure environment. - [Review the shared responsibility mode](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Enterprise-Governance/Review-the-shared-responsibility-mode/page.md): This article explores the Shared Responsibility Model in cloud computing, defining security and compliance responsibilities between Microsoft Azure and customers. - [Understanding Azure hierarchy](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Enterprise-Governance/Understanding-Azure-hierarchy/page.md): This article explains Azures hierarchy, including management groups, subscriptions, and resource groups, for efficient resource management and policy enforcement. - [Enable Azure role based access control RBAC](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Enterprise-Governance/Enable-Azure-role-based-access-control-RBAC/page.md): This article explains Azure Role-Based Access Control, its core concepts, role assignments, and how to create custom roles in the Azure portal. - [Configure Azure policies](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Enterprise-Governance/Configure-Azure-policies/page.md): This article explains how to configure Azure Policies for governance and compliance across Azure resources. - [Configure Azure Initiatives](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Enterprise-Governance/Configure-Azure-Initiatives/page.md): Learn to group Azure policies into an initiative for easier management and consistent enforcement across your environment. - [Compare and contrast Azure RBAC vs Azure policies](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Enterprise-Governance/Compare-and-contrast-Azure-RBAC-vs-Azure-policies/page.md): This article compares Azure RBAC and Azure Policy, highlighting their distinct roles in managing resource access and configuration compliance in Azure governance. - [Enable resource locks](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Enterprise-Governance/Enable-resource-locks/page.md): This article explains how to enable Azure Resource Locks to protect critical resources from accidental modifications or deletions. - [Deploy Azure blueprints](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Enterprise-Governance/Deploy-Azure-blueprints/page.md): This article explains how to deploy Azure Blueprints for consistent and compliant management of Azure resources. - [Design an Azure subscription management plan](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Enterprise-Governance/Design-an-Azure-subscription-management-plan/page.md): This article explains how to design an effective Azure subscription management plan, covering subscriptions, resource management, governance, cost control, and security. ### Perimeter Security - [Introduction](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Perimeter-Security/Introduction/page.md): This article covers key cybersecurity strategies, focusing on perimeter, network, host, and container security measures. - [Define defense in depth](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Perimeter-Security/Define-defense-in-depth/page.md): This article explains the defense in depth strategy in Azure, detailing multiple security layers protecting resources from potential threats. - [Explore virtual network security](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Perimeter-Security/Explore-virtual-network-security/page.md): This article compares virtual network security in traditional on-premises setups with modern Azure environments, highlighting key security features and management benefits. - [Enable Distributed Denial of Service DDoS Protection](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Perimeter-Security/Enable-Distributed-Denial-of-Service-DDoS-Protection/page.md): This article explains how to enable DDoS protection in Azure to safeguard online services from overwhelming traffic attacks. - [Explore Azure Firewall features](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Perimeter-Security/Explore-Azure-Firewall-features/page.md): This article explores the features and benefits of Azure Firewall, a cloud-based network security service from Microsoft Azure. - [Implementing Azure Firewall](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Perimeter-Security/Implementing-Azure-Firewall/page.md): This guide demonstrates how to implement Azure Firewall within a hub-spoke architecture, covering deployment steps, configuration, and network security. - [Configure Forced Tunneling](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Perimeter-Security/Configure-Forced-Tunneling/page.md): This guide explains forced tunneling in Azure Firewall deployments for inspecting outbound traffic using on-premises infrastructure before it reaches the internet. - [Create User Defined Routes and Network Virtual Appliances](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Perimeter-Security/Create-User-Defined-Routes-and-Network-Virtual-Appliances/page.md): This guide explains creating user-defined routes and configuring network virtual appliances on Azure for traffic inspection and security enforcement. - [Explore hub and spoke topology](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Perimeter-Security/Explore-hub-and-spoke-topology/page.md): Guide to configuring Azure hub-and-spoke networking with route tables and Azure Firewall to control spoke-to-spoke and outbound traffic, plus verification steps and firewall rule examples. ### Network Security - [Introduction](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Network-Security/Introduction/page.md): This lesson explores network security within a defense-in-depth strategy, covering key topics like NSGs, ASGs, service endpoints, private links, and Azure security services. - [Explore Network Security Groups NSG](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Network-Security/Explore-Network-Security-Groups-NSG/page.md): This guide explains how Network Security Groups operate in Azure to enhance security alongside Azure Firewall for a secure network environment. - [Deploy a Network Security Groups](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Network-Security/Deploy-a-Network-Security-Groups/page.md): This article provides a guide on deploying and managing Network Security Groups in Azure for effective traffic control and security. - [Create Application Security Groups](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Network-Security/Create-Application-Security-Groups/page.md): This article explains how to create and manage Application Security Groups in Azure for simplified network security management. - [Enable service endpoints](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Network-Security/Enable-service-endpoints/page.md): This article explains how to enable Azure service endpoints to enhance security by connecting virtual networks to Azure services without exposing data to the public internet. - [Deploy private links](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Network-Security/Deploy-private-links/page.md): This article covers deploying Azure Private Link for secure, private access to Azure services, enhancing connectivity and security over traditional service endpoints. - [Implement load balancing](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Network-Security/Implement-load-balancing/page.md): This guide explores implementing load balancing using Azure Load Balancer to distribute incoming traffic across multiple servers for high availability and reliability. - [Implement Application Gateway](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Network-Security/Implement-Application-Gateway/page.md): Learn to implement the Azure Application Gateway, a layer 7 web traffic load balancer with advanced routing and security features. - [Deploy a web application firewall](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Network-Security/Deploy-a-web-application-firewall/page.md): This article provides a guide on deploying and configuring Azure Web Application Firewall to secure web applications against various threats. - [Configure and manage Azure front door](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Network-Security/Configure-and-manage-Azure-front-door/page.md): Learn to configure and manage Azure Front Door, a global load balancing service with WAF capabilities, and compare it with Azure Application Gateway and Azure Firewall. - [ExpressRoute](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Network-Security/ExpressRoute/page.md): ExpressRoute is a Microsoft Azure service providing secure, private connections between on-premises infrastructure and cloud services, enhancing security, reliability, and performance. ### Host Security - [Introduction](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Host-Security/Introduction/page.md): This guide focuses on host security best practices within Azure environments for IT professionals and security administrators. - [Enable endpoint protection](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Host-Security/Enable-endpoint-protection/page.md): This article provides an overview of Azure Endpoint Protection, detailing its features, deployment, and monitoring practices to enhance cybersecurity. - [Define a privileged access device strategy](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Host-Security/Define-a-privileged-access-device-strategy/page.md): This article outlines a strategy for managing privileged access devices to enhance security for sensitive tasks within organizations. - [Deploy privileged access workstations](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Host-Security/Deploy-privileged-access-workstations/page.md): This article discusses the deployment of Privileged Access Workstations to enhance security for managing sensitive tasks and protecting privileged user actions. - [Create virtual machine templates](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Host-Security/Create-virtual-machine-templates/page.md): This article explains how to create and utilize virtual machine templates for standardized and efficient deployment in cloud environments. - [Enable and secure remote access management](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Host-Security/Enable-and-secure-remote-access-management/page.md): This guide explains how to enable and secure remote access for virtual machines using Azure Bastion, simplifying management and enhancing security. - [Configure update management](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Host-Security/Configure-update-management/page.md): This article explains how to configure Azure Update Management for keeping Windows and Linux servers updated and secure. - [Deploy disk encryption](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Host-Security/Deploy-disk-encryption/page.md): This article explains how to configure Azure Disk Encryption to secure data on virtual machines while balancing security and performance. - [Microsoft Defender for Endpoint](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Host-Security/Microsoft-Defender-for-Endpoint/page.md): Microsoft Defender for Endpoint is a solution that protects enterprise networks from advanced cyber threats with detection, investigation, and response capabilities. - [Explore Azure Security Center recommendations](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Host-Security/Explore-Azure-Security-Center-recommendations/page.md): This article explores Microsoft Defender for Cloud recommendations focusing on host-level security for Azure virtual machines and their proactive security guidance. - [Secure Azure workloads with Azure Security Benchmarks](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Host-Security/Secure-Azure-workloads-with-Azure-Security-Benchmarks/page.md): This article outlines Microsoft Security Benchmarks for securing Azure workloads, including establishing baselines, categorizing recommendations, and ensuring compliance through Defender for Cloud. ### Container Security - [Introduction](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Container-Security/Introduction/page.md): This article explores container security fundamentals and key areas related to container management on Azure. - [Virtual Machines vs Containers](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Container-Security/Virtual-Machines-vs-Containers/page.md): This article explores the fundamental differences between virtual machines and containers in modern software development and deployment. - [Azure Container Instances](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Container-Security/Azure-Container-Instances/page.md): This guide covers Azure Container Instances architecture, benefits, security best practices, and deployment instructions via the Azure Portal. - [Explore the Azure Container Registry ACR](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Container-Security/Explore-the-Azure-Container-Registry-ACR/page.md): This article explores Azure Container Registry, detailing its features, structure, and how to build and manage Docker images within Azure. - [Enable Azure Container Registry authentication](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Container-Security/Enable-Azure-Container-Registry-authentication/page.md): This guide explores authentication methods for Azure Container Registry, detailing use cases, commands, and limitations for each method. - [Review Azure Kubernetes Service AKS](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Container-Security/Review-Azure-Kubernetes-Service-AKS/page.md): This article reviews Azure Kubernetes Service, highlighting its benefits, key concepts, and architecture for managing containerized applications. - [Azure Kubernetes Service architecture](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Container-Security/Azure-Kubernetes-Service-architecture/page.md): This article explores the architecture of Azure Kubernetes Service, focusing on node components and their interaction with the master node for effective cluster management. - [Configure Azure Kubernetes Service networking](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Container-Security/Configure-Azure-Kubernetes-Service-networking/page.md): This article explores Azure Kubernetes Service networking, covering internal architecture, key components, and traffic types for secure containerized deployments. - [Azure Kubernetes Service storage](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Container-Security/Azure-Kubernetes-Service-storage/page.md): This article explains how persistent storage is integrated and managed within an Azure Kubernetes Service cluster. - [Secure authentication to Azure Kubernetes Service with Active Directory](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Container-Security/Secure-authentication-to-Azure-Kubernetes-Service-with-Active-Directory/page.md): This guide explores secure authentication and network security for Azure Kubernetes Service using Azure Active Directory integration. ### Key Vault - [Introduction](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Key-Vault/Introduction/page.md): This article focuses on securing data and applications using Azure Key Vault, covering its features like certificate management, key handling, and secret management. - [Explore Azure Key Vault](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Key-Vault/Explore-Azure-Key-Vault/page.md): This article explores Azure Key Vault, a service for securely managing keys, secrets, and certificates in the cloud. - [Azure Key Vault Cryptographic Keys](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Key-Vault/Azure-Key-Vault-Cryptographic-Keys/page.md): This article explores cryptographic keys in Azure Key Vault, focusing on their management, protection methods, and compliance levels for secure information storage. - [Azure Key Vault Secrets](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Key-Vault/Azure-Key-Vault-Secrets/page.md): Azure Key Vault Secrets offer a secure method to manage sensitive data for applications, reducing risks associated with hard-coded credentials. - [Azure Key Vault Certificates](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Key-Vault/Azure-Key-Vault-Certificates/page.md): Azure Key Vault Certificates provide a secure solution to manage certificates for applications, ensuring they are handled securely without embedding them in code or servers. - [Configure key vault access](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Key-Vault/Configure-key-vault-access/page.md): This article explains how to securely access data stored in Azure Key Vault using Azure AD for authentication and RBAC or Access Policies for authorization. - [Manage customer managed keys](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Key-Vault/Manage-customer-managed-keys/page.md): This article explores managing customer-managed keys in Azure for enhanced control over encryption processes and data security. - [Configure key rotation](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Key-Vault/Configure-key-rotation/page.md): This guide explains how to configure key rotation in Azure to enhance security and meet compliance standards. - [Manage Key Vault safety and recovery features](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Key-Vault/Manage-Key-Vault-safety-and-recovery-features/page.md): This article explores Azure Key Vaults safety and recovery features, focusing on soft delete and backup options for secure data management. ### App Security - [Introduction](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/App-Security/Introduction/page.md): This article explores critical aspects of application security as part of a comprehensive defense-in-depth strategy. - [Review the Microsoft identity platform](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/App-Security/Review-the-Microsoft-identity-platform/page.md): This article provides an overview of Microsoft Identity Platform 2.0 for developers integrating authentication features into applications using standard tools and techniques. - [Explore Azure AD application scenarios](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/App-Security/Explore-Azure-AD-application-scenarios/page.md): This lesson explores various Azure Active Directory application scenarios and integration processes for different application types. - [Register an application with App Registration](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/App-Security/Register-an-application-with-App-Registration/page.md): Guide to registering applications in Microsoft Entra ID and obtaining access tokens using the OAuth2 client credentials flow. - [Configure Microsoft Graph permissions](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/App-Security/Configure-Microsoft-Graph-permissions/page.md): This guide provides instructions for configuring Microsoft Graph permissions using Azure portal, Graph Explorer, and Postman, including token and JWT explanations. - [Enable managed identities](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/App-Security/Enable-managed-identities/page.md): Learn to enable managed identities for secure SQL database connections without exposing credentials in plain text. - [Securing web apps](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/App-Security/Securing-web-apps/page.md): This article explores securing web applications in Azure, focusing on App Service Plans and built-in security features. - [Deploy web app certificates](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/App-Security/Deploy-web-app-certificates/page.md): This article discusses the importance of web app certificates for security, trust, and data integrity, along with options available in Azure for managing these certificates. ### Storage Security - [Introduction](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Storage-Security/Introduction/page.md): This article explores storage security as a vital part of a defense in depth strategy, detailing methods to protect data in Azure Storage and SQL services. - [Define data sovereignty](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Storage-Security/Define-data-sovereignty/page.md): This article explains data sovereignty, its importance, and how Azure's global infrastructure supports compliance with local laws and regulations regarding data storage. - [Configure Azure storage access](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Storage-Security/Configure-Azure-storage-access/page.md): This guide helps you choose and configure the most appropriate Azure storage access methods based on your specific needs. - [Shared access signatures](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Storage-Security/Shared-access-signatures/page.md): Shared Access Signatures provide granular control over access to Azure storage resources, enhancing security by allowing temporary and limited access without exposing account keys. - [Azure AD storage authentication](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Storage-Security/Azure-AD-storage-authentication/page.md): Azure AD Storage Authentication offers a secure method for accessing Azure Storage, addressing limitations of shared access signatures through identity-based authentication and authorization. - [Configure blob data retention policies](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Storage-Security/Configure-blob-data-retention-policies/page.md): This article explains how to configure Azure Blob Storages immutable data retention policies for compliance and data integrity. - [Azure files authentication](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Storage-Security/Azure-files-authentication/page.md): This article explains authentication methods for Azure Files, focusing on on-premises Active Directory and Azure Active Directory Domain Services. - [Enable the secure transfer required](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Storage-Security/Enable-the-secure-transfer-required/page.md): This article covers the Secure Transfer Required option, a security feature that enforces HTTPS for Azure Storage Account transactions. ### Database Security - [Introduction](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Database-Security/Introduction/page.md): This lesson covers a defense-in-depth strategy for database security, focusing on multi-layered protection measures to safeguard data assets. - [Enable Azure AD authentication for SQL database](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Database-Security/Enable-Azure-AD-authentication-for-SQL-database/page.md): This guide demonstrates how to enable Azure Active Directory authentication for an SQL database, enhancing security and simplifying user management. - [Configure SQL database firewalls](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Database-Security/Configure-SQL-database-firewalls/page.md): Configuring firewall rules for Azure SQL Database enhances security by controlling access based on IP addresses and network ranges. - [Enable and monitor database auditing](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Database-Security/Enable-and-monitor-database-auditing/page.md): Guide to enable and monitor Azure SQL database auditing, route logs to Log Analytics Storage or Event Hubs, analyze events with KQL, and set retention, alerts, and integrations - [Implement data discovery and classification](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Database-Security/Implement-data-discovery-and-classification/page.md): This guide explains how to implement data discovery and classification using Azure SQL to protect sensitive information in databases. - [Enable Defender for SQL](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Database-Security/Enable-Defender-for-SQL/page.md): Learn to enable Defender for SQL using Azure Defender for Cloud while exploring its security features and advanced threat protection capabilities. - [Explore vulnerability assessment](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Database-Security/Explore-vulnerability-assessment/page.md): Automated security solution for scanning, identifying, and reporting vulnerabilities in database environments with ongoing monitoring and detailed remediation guidance. - [Configure dynamic data masking](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Database-Security/Configure-dynamic-data-masking/page.md): This article explains Dynamic Data Masking in Azure SQL, its benefits, and how to configure it to protect sensitive information. - [Implement transparent data encryption](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Database-Security/Implement-transparent-data-encryption/page.md): This article explains how to implement Transparent Data Encryption in Azure SQL to secure databases by encrypting data at rest and during backups. - [Always encrypted](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Database-Security/Always-encrypted/page.md): Always Encrypted is a data encryption technology that protects sensitive information in Azure SQL Database and SQL Server throughout its lifecycle. ### Azure Monitor - [Introduction](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Azure-Monitor/Introduction/page.md): This article examines Azure Monitors role in security operations, covering configuration, metrics, logs, alerts, and diagnostics for effective monitoring. - [Explore Azure Monitor](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Azure-Monitor/Explore-Azure-Monitor/page.md): Azure Monitor is a comprehensive platform for collecting, storing, and analyzing monitoring data from various sources within the Microsoft Azure suite. - [Configure and monitor metrics and logs](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Azure-Monitor/Configure-and-monitor-metrics-and-logs/page.md): Learn to configure and monitor metrics and logs in Azure for effective resource performance tracking and event analysis. - [Enable Log Analytics](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Azure-Monitor/Enable-Log-Analytics/page.md): This guide covers key features of Azure Log Analytics, workspace setup, and best practices for data collection, visualization, and retention. - [Manage connected sources for log analytics](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Azure-Monitor/Manage-connected-sources-for-log-analytics/page.md): This article provides a guide on managing connected sources for Log Analytics in various environments, focusing on agent installation and data ingestion methods. - [Enable Azure monitor Alerts](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Azure-Monitor/Enable-Azure-monitor-Alerts/page.md): This article explains how to enable Azure Monitor Alerts for notifications about events in your Azure subscription. - [Configure properties for diagnostic logging](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Azure-Monitor/Configure-properties-for-diagnostic-logging/page.md): Configure diagnostic logging properties for comprehensive monitoring in Azure, covering application, operating system, resources, subscriptions, tenants, and custom sources. ### Microsoft Defender for Cloud - [Introduction](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Microsoft-Defender-for-Cloud/Introduction/page.md): This guide covers advanced features of Microsoft Defender for Cloud to enhance security for your cloud environments. - [Review the cyber kill chain](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Microsoft-Defender-for-Cloud/Review-the-cyber-kill-chain/page.md): This article explores the Cyber Kill Chain framework, detailing each stage of a cyber attack to help organizations prepare and mitigate threats. - [Implement Microsoft Defender for Cloud](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Microsoft-Defender-for-Cloud/Implement-Microsoft-Defender-for-Cloud/page.md): This guide explains how to implement Microsoft Defender for Cloud using a Prevent-Detect-Respond framework for robust cybersecurity in hybrid cloud environments. - [Configure Defender for Cloud policies](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Microsoft-Defender-for-Cloud/Configure-Defender-for-Cloud-policies/page.md): This guide explains configuring Defender for Cloud policies in Azure to monitor and enforce security compliance using the Azure Security Benchmark. - [Manage and implement Defender for Cloud recommendations](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Microsoft-Defender-for-Cloud/Manage-and-implement-Defender-for-Cloud-recommendations/page.md): This article explores Microsoft Defender for Cloud recommendations and demonstrates their implementation to enhance cloud security posture directly from the Azure portal. - [Explore secure score](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Microsoft-Defender-for-Cloud/Explore-secure-score/page.md): This article explores Secure Score, its importance in assessing Azure security posture, and how it provides actionable insights for improving security practices. - [Define brute force attacks](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Microsoft-Defender-for-Cloud/Define-brute-force-attacks/page.md): This article explains brute force attacks, their mitigation strategies, detection using Microsoft Defender for Cloud, and configuring alert notifications for security events. - [Implement Just in time VM access](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Microsoft-Defender-for-Cloud/Implement-Just-in-time-VM-access/page.md): This article guides implementing Just-in-Time access for virtual machines to enhance security by temporarily opening management ports only when needed. ### Microsoft Sentinel - [Introduction](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Microsoft-Sentinel/Introduction/page.md): This article provides an overview of Microsoft Sentinel, covering its features and integration for security monitoring and incident response. - [Enable Azure Sentinel](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Microsoft-Sentinel/Enable-Azure-Sentinel/page.md): Enable Microsoft Sentinel to unify security management, detect threats, and respond rapidly across on-premises and cloud infrastructures. - [Configure data connections to Sentinel](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Microsoft-Sentinel/Configure-data-connections-to-Sentinel/page.md): This article explains how to configure data connections to Microsoft Sentinel using connectors for various data sources. - [Create workbooks for explore Sentinel data](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Microsoft-Sentinel/Create-workbooks-for-explore-Sentinel-data/page.md): This article explains how to create and utilize workbooks in Azure Sentinel for effective data visualization and analysis. - [Enable rules to create incidents](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Microsoft-Sentinel/Enable-rules-to-create-incidents/page.md): This article demonstrates enabling rules in Microsoft Sentinel to automatically create incidents from alerts, enhancing security response and resource allocation. - [Configure playbooks](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Microsoft-Sentinel/Configure-playbooks/page.md): This article explains how to configure playbooks in Microsoft Sentinel for automated cybersecurity threat responses using Azure Logic Apps. - [Hunt and investigate potential breaches](https://notes.kodekloud.com/docs/Microsoft-Azure-Security-Technologies-AZ-500/Microsoft-Sentinel/Hunt-and-investigate-potential-breaches/page.md): This guide explores proactive hunting and investigation of potential security breaches using Microsoft Sentinels advanced capabilities.