Microsoft Azure Fundamentals: Describe general security and network security features

After completing this module, you'll be able to:

• Strengthen your security posture and protect against threats by using Azure Security Center.
• Collect and act on security data from many different sources by using Azure Sentinel.
• Store and access sensitive information such as passwords and encryption keys securely in Azure Key Vault.
• Manage dedicated physical servers to host your Azure VMs for Windows and Linux by using Azure Dedicated Host.

After completing this module, you'll be able to:

• Identify the layers that make up a defense in depth strategy.
• Explain how Azure Firewall enables you to control what traffic is allowed on the network.
• Configure network security groups to filter network traffic to and from Azure resources within a Microsoft Azure virtual network.
• Explain how Azure DDoS Protection helps protect your Azure resources from DDoS attacks.

• Introduction
• Protect against security threats by using Azure Security Center
• Detect and respond to security threats by using Azure Sentinel
• Store and manage secrets by using Azure Key Vault
• Exercise - Manage a password in Azure Key Vault
• Host your Azure virtual machines on dedicated physical servers by using Azure Dedicated Host
• Knowledge check
• Summary

• Introduction
• What is defense in depth?
• Protect virtual networks by using Azure Firewall
• Protect from DDoS attacks by using Azure DDoS Protection
• Filter network traffic by using network security groups
• Exercise - Configure network access to a VM by using a network security group
• Combine Azure services to create a complete network security solution
• Knowledge check
• Summary