AZ-500 Workshop Agenda

This is the agenda for the AZ-500 workshop

=== DAY 1 ===

• Manage Azure AD identities - Mike

  • Azure AD users
  • Azure AD groups
  • Service principals
  • App registrations and consent
  • Azure AD Connect
    • Authentication types
    • Password writeback

• Manage secure access - Tim

  • Azure AD PIM
    • Activate and configure
    • Access reviews
  • Azure AD IdP
  • RBAC
    • Custom roles

• Platform protection - Mike

  • VNet security (1.5 hr)

    • NSGS
    • Azure Firewall
    • Azure Bastion
    • Service endpoints
    • Resource firewalls

  • VM security (1 hr) - Tim

    • Extensions, endpoint protection
    • Update Management
    • Azure Disk Encryption

  • Container security - Mike

    • ACR Authentication
    • AKS isolation

=== DAY 2 ===

• Security operations - Tim

  • Azure Monitor
    • Alerts
    • Diagnostic logging

• Secure data - Mike

  • Storage accounts

    • Key Management
    • Azure AD auth
    • SAS tokens and stored access policies
    • SSE

  • Azure Security Center - Tim

    • JIT VM Access
    • Azure Policy integration
    • Compliance and secure score

  • Sentinel

    • Configure data sources
    • Evaluate results
    • Configure Alerts
    • Workflow automation

  • Databases (1 hr) - Mike

    • Auth
    • Auditing
    • Encryption

  • Key Vault (1 hr) - Tim

    • Access policies
    • Backup and restore
    • Key rotation

• Exam Prep (1 hr)

  • Item types
  • Practice questions
  • Online testing process
  • After the exam/next steps