SC-5002: Secure Azure services and workloads with Microsoft Defender for Cloud regulatory compliance controls

This one-day course guides you in securing Azure services and workloads using Microsoft Cloud Security Benchmark controls in Microsoft Defender for Cloud via the Azure portal.

• Administrators
• Security Engineer

None

After completing this course, students will be able to:

• Use Microsoft Defender for Cloud to streamline regulatory compliance by identifying and addressing issues that hinder meeting compliance standards and certifications.
• Enable Microsoft Defender for Cloud on their Azure subscription to enhance security monitoring, compliance management, and threat protection for their cloud-based applications.
• Filter network traffic using Network Security Groups (NSGs) in the Azure portal.
• Create, configure, and apply NSGs for improved network security.
• Create a Log Analytics workspace in the Azure portal for Microsoft Defender for Cloud, improving data collection and security analysis.
• Configure and integrate a Log Analytics agent with a workspace in Defender for Cloud via the Azure portal, boosting security analysis.
• Understand the risk of open management ports on virtual machines and how JIT VM access in Microsoft Defender for Cloud mitigates this threat.
• Configure Azure Key Vault networking settings via the Azure portal, ensuring secure and controlled access to your stored secrets.
• Securely connect an Azure SQL server via Azure Private Endpoint in the Azure portal, enhancing data communication security.

• Examine Defender for Cloud regulatory compliance standards
• Enable Defender for Cloud on your Azure subscription
• Filter network traffic with a network security group using the Azure portal
• Create a Log Analytics workspace for Microsoft Defender for Cloud
• Configure and integrate a Log Analytics agent and workspace in Defender for Cloud
• Explore just-in-time virtual machine access
• Configure Azure Key Vault networking settings
• Connect an Azure SQL server using an Azure Private Endpoint using the Azure portal