Module 1 : Manage Azure Active Directory (Azure AD) identities
Identity & Access Management (IAM) Overview
Azure AD Tenant, subscription and Directory
Azure AD User, Group and RBAC
Custom domain binding with Azure AD
Azure AD User's Settings
Azure AD License
Azure AD deleted account restoration and password reset
Azure AD Groups - Assigned & Dynamic Membership
Module 2 : Manage secure access by using Azure AD
Multi Factor Authentication (MFA)
MFA Advance Settings
Azure AD Identity Protection
Azure AD Conditional Access
Module 3: Azure AD Privileged Identity Management (PIM)
Privileged Identity Management Overview
License requirements for Azure AD Privileged Identity Management
Azure AD Role eligibility & Assignment
Privileged Identity Management(PIM) Alerts
Azure Resource Role eligibility & Assignment
Global Administration's Role Elevation
Module 4 : Azure AD entitlement management & Access Review
Azure AD Identity Governance Overview
License requirement for Entitlement Management
Implementation of Entitlement Management
Role Delegation for Entitlement Management
Example of Day to Day Operations
Access review using Entitlement Management
Access Review for group & App using Entitlement Management
Module 5 : Key Vault and Managed Identity
Azure Key Vault
Azure Key Vault with Data Factory
Managed Identity
System Assigned Vs User Assigned identity
Managed Identity Based Case Scenario
Azure Disk Encryption
Customer Managed Key ( CMK)
Module 6 : Azure AD App Registration
Server Authentication using Identity Provider
App Authentication using AD
Enterprise app integration with AD
Application Registration
Module 7 : Azure Networking & Secure Hybrid Network Connections
Azure Virtual Network Overview
How to create Virtual Network & Subnet
Virtual Network Peering Overview
Virtual Network Peering Implementation
Azure VNet to VNet connection
Azure Point to Site VPN
Azure Site to Site VPN
Express Route
Route Table
Module 8 : Network Security
Azure Bastions
Azure Firewall
Distributed Denial of Service (DDOS) - Part 1
Distributed Denial of Service (DDOS) - Part 2
Network Security Group (NSG)
Application Security Group
Azure Service Endpoint
Private Endpoint & Private Link Service
Differences between Service Endpoint & Private Endpoint
Module 9 : Storage Account Security
Storage Account Creation (Brush up the basics)
Connect Storage Account using access key
Storage account encryption - Microsoft Managed keys
Storage account encryption - Customer Managed keys1
Storage Account - Encryption Scope
Storage Account - Infrastructure Encryption
Storage Account - Network & Firewall
Storage Account access to Resource Instance
Storage Account - Routing Preference
Azure Defender for Storage
Shared Access Signature
Module 10 : Azure SQL Security
SQL Database and SQL Server Deployment with different purchase model
SQL Server
How to Connect to SQL Database
Azure SQL Encryption
Azure SQL - Firewall and Virtual Networks
Private Endpoints connections for Azure SQL
Azure SQL Auditing
Azure Defender for SQL
Dynamic Data Masking
Lab Manual for Dynamic Data Masking
Module 11 : Automation
Update Management
Update Management - Non Azure VM
Automation Runbook
Script for Automation Runbook Lab
Module 12 : Application gateway & Front door
Application Gateway
Application gateway Domain Binding and Health Probe setting
Application Gateway SSL binding with domain
Application Gateway multi site configuration
Azure Front Door
Front door Custom Domain & Certificate Binding
Web application firewall for Application Gateway
Web Application Firewall for Front Door
Module 13 : Manage Security Operation
Azure Monitor Overview
Azure Monitor Alerts
Azure Log Analytics
Query Language Syntax
Diagnostic Data
Security Center Overview
Security Center Inventory
Continuous Export & Workflow Automation
Azure Defender Just In Time (JIT) VM Access
Azure Defender VM Vulnerability Assessment
Azure Sentinel
Azure Sentinel - Data Collection
Azure Sentinel - Detect & Investigate
Azure Sentinel - Automatic Response
Azure Sentinel - Hunting
Module 14 : Serverless Computing & Security
What is Container
Install docker on Linux and create container
Azure Container Instance
Azure Container Registry (ACR)
Lab Manual - Azure Container Registry (ACR)
What is Kubernetes
Kubernetes Cluster Architecture
Azure Kubernetes Cluster setup
App Service Plans
App Service
App Service Deployment Center
App Service Custom Domain Binding
App Service SSL Binding with custom domain
Launch your Graphy
