AZ-500 Exam Study Guide (Microsoft Azure Security Technologies)
You can access AZ-500 Exam Microsoft official page here
Preparing for the AZ-500 Microsoft Azure Security Technologies exam? Don’t know where to start? This post is the AZ-500 Certificate Study Guide (with links to each exam objective).
I have curated a list of articles from Microsoft documentation for each objective of the AZ-500 exam. Hope this article will be your AZ-500 Study Guide.
Also, please share the post within your circles so it helps them to prepare for the exam.
Skills Measured
- Manage Identity and Access (30-35%)
- Implement Platform Protection (15-20%)
- Manage Security Operations (25-30%)
- Secure Data and Applications (20-25%)
AZ-500 Exam Free Study Guide
For each test objective, I’ve compiled a thorough collection of articles from Microsoft documentation. Please feel free to forward this page to your friends and coworkers in order to assist them in preparing for the test .
Manage Identity and Access (30-35%)
Manage Azure Active Directory Identities
- Configure security for service principals
- Application & service principal objects in Azure AD
- Create an Azure AD app & service principal to access resources
- Manage Azure AD directory groups
- Create a basic group & add members using Azure AD
- Manage access with Azure Active Directory groups
- Manage Azure AD users
- Add or delete users using Azure Active Directory
- Create and manage users
- Configure password writeback
- Enable Azure AD self-service password reset writeback
- Configure authentication methods including password hash and Pass-Through
Authentication (PTA), OAuth, and passwordless - What is password hash synchronization with Azure AD?
- Implement password hash synchronization with Azure AD Connect sync
- Sign-in with Azure AD Pass-through Authentication
- Azure Active Directory Pass-through Authentication: Quickstart
- Configure an OAuth application from the Azure AD app gallery
- Passwordless authentication options for Azure Active Directory
- Enable passwordless sign-in with the Microsoft Authenticator app
- Transfer Azure subscriptions between Azure AD tenants
- Transfer an Azure subscription to a different Azure AD directory
- Associate a subscription to a directory
Configure Secure Access by Using Azure AD
- Monitor privileged access for Azure AD Privileged Identity Management (PIM)
- LinkedIn: Monitor privileged access for Azure AD PIM
- Configure Access Reviews
- What are Azure AD access reviews?
- Manage user access with Azure AD access reviews
- Activate and configure PIM
- Start using Privileged Identity Management
- Activate my Azure AD roles in PIM
- Implement Conditional Access policies including Multi-Factor Authentication (MFA)
- What is Conditional Access in Azure Active Directory?
- Conditional Access: Require MFA for all users
- Secure user sign-in events with Azure Multi-Factor Authentication
- Configure Azure AD identity protection
- What is Identity Protection?
- Configure Azure MFA registration policy in Identity Protection
- Configure and enable risk policies
Manage Application Access
- Create App Registration
- Register an application with the Microsoft identity platform
- Register an application with the Microsoft identity platform
- Configure App Registration permission scopes
- Permissions and consent in the Microsoft identity platform endpoint
- Configure an application to expose a web API
- Manage App Registration permission consent
- Azure Active Directory consent framework
- Permissions and consent in the Microsoft identity platform endpoint
- Managing consent to applications and evaluating consent requests
- Manage API access to Azure subscriptions and resources
- Managing API Access to Microsoft Azure Subscriptions and Resources
- How to use Role-Based Access Control in Azure API Management
Manage Access Control
- Configure subscription and resource permissions
- Add or change Azure subscription administrators
- Add or remove Azure role assignments using the Azure portal
- Configure resource group permissions
- Grant a group access to Azure resources with PowerShell
- Configure custom RBAC roles
- Azure custom roles
- Create & assign a custom role in Azure AD
- Create Azure custom roles using the portal
- Identify the appropriate role
- LinkedIn: Identify the appropriate role
- Apply the principle of least privilege
- Principle of least privilege
- Assign permissions to groups using the principle of least privilege
- Interpret permissions
- List Azure role assignments to understand the access level
- Check access
- View the access a user has to Azure resources
Implement Platform Protection (15-20%)
Implement Advanced Network Security
- Secure the connectivity of virtual networks (VPN authentication, Express Route
encryption) - Azure network security overview
- Create a Site-to-Site VPN connection in the Azure portal
- Configure a VPN connection using native Azure certificate authentication
- Concepts on ExpressRoute encryption
- ExpressRoute encryption: IPsec over ExpressRoute for Virtual WAN
- Configure Network Security Groups (NSGs) and Application Security Groups (ASGs)
- Create, change, or delete a network security group
- Create application security groups
- Associate network interfaces to an ASG
- Create and configure Azure Firewall
- What is Azure Firewall?
- Deploy and configure Azure Firewall
- Configure Azure Front Door service as an Application Gateway
- Create and configure Azure Front Door service as an application gateway
- Load-balancing with Azure’s application delivery suite
- Configure a Web Application Firewall (WAF) on Azure Application Gateway
- Create an application gateway with a Web Application Firewall
- Create an Azure WAF v2 on Application Gateway using an ARM template
- FAQs for Azure Web Application Firewall on Application Gateway
- Configure Azure Bastion
- Create an Azure Bastion host using the portal
- Configure a firewall on a storage account, Azure SQL, KeyVault, or App Service
- Configure Azure Storage firewalls and virtual networks
- Create a server-level firewall rule in Azure SQL Database
- Configure Azure Key Vault firewalls and virtual networks
- Configuring Azure Firewall with your App Service Environment
- Implement Service Endpoints
- Azure Virtual Network service endpoints
- Restrict network access with service endpoints
- Implement DDoS protection
- Azure DDoS Protection Standard overview
- Manage Azure DDoS Protection using the Azure portal
Configure Advanced Security for Compute
- Configure endpoint protection
- Microsoft Endpoint Protection for Azure
- Supported endpoint protection solutions
- Endpoint protection in Microsoft Azure
- Configure and monitor system updates for VMs
- Manage updates and patches for your VMs
- How to deploy updates and review results?
- Managing updates for your Azure VM
- Configure authentication for Azure Container Registry
- Authenticate with an Azure container registry
- Use Azure managed identity to authenticate to Azure container registry
- Authenticate with ACR from Azure Kubernetes Service
- Configure security for different types of containers
- Container security in Azure Security Center
- Implement vulnerability management
- Security Control: Vulnerability Management
- Configure isolation for AKS
- Compute isolation in Azure Kubernetes Service
- Best practices for cluster isolation in Azure Kubernetes Service
- Configure security for container registry
- Azure Security Baseline for Azure Container Registry
- Azure Container Registry image scanning by Security Center
- Azure Container Registry updates for security and reliability
- Implement Azure Disk Encryption
- Azure Disk Encryption for Windows VMs
- Azure Disk Encryption for Linux VMs
- Azure Disk Encryption for Windows VMs FAQ
- Configure authentication and security for Azure App Service
- Authentication and authorization in Azure App Service
- Configure your App Service app to use Azure AD login
- Advanced usage of authentication in Azure App Service
- Authenticate users end-to-end in Azure App Service
- Configure SSL/TLS certs
- Add a TLS/SSL certificate in Azure App Service
- Configuring TLS for an application in Azure
- Configure authentication for Azure Kubernetes Service
- Access and identity options for Azure Kubernetes Service
- Use managed identities in Azure Kubernetes Service
- Best practices for authentication in Azure Kubernetes Service
- Configure automatic updates
- Update Management overview
- Enable Update Management from an Azure VM
Manage Security Operations (25-30%)
Monitor Security by Using Azure Monitor
- Create and customize alerts
- PS Course Module: Create and customize alerts in Azure
- Create, view, and manage metric alerts using Azure Monitor
- Quickstart: Create custom alerts
- Monitor security logs by using Azure Monitor
- Analyze and review Logs for anomalous behavior
- Security Logging and Audit Log Collection within Azure
- Configure diagnostic logging and log retention
- Enable diagnostics logging for apps in Azure App Service
- Configure the data retention period of logs
Monitor Security by Using Azure Security Center
- Evaluate vulnerability scans from Azure Security Center
- Integrated vulnerability assessment solution for Azure virtual machines
- Configure Just in Time VM access by using Azure Security Center
- Understanding just-in-time (JIT) VM access
- Azure Security Center – Just-in-Time Network Access
- Secure your management ports with just-in-time access
- Configure centralized policy management by using Azure Security Center
- Working with security policies in the Security Center
- Configure a security policy in Azure Policy using the REST API
- Configure compliance policies and evaluate for compliance by using Azure Security Center
- Working with security policies
- Assess your regulatory compliance in Security Center
Monitor Security by Using Azure Sentinel
- Create and customize alerts
- Create custom analytics rules to detect threats
- Configure data sources to Azure Sentinel
- Connect data sources to Azure Sentinel
- On-board Azure Sentinel: Connect data sources
- Evaluate results from Azure Sentinel
- Investigate incidents with Azure Sentinel
- Visualize and monitor your data
- Configure workflow automation by using Azure Sentinel
- What is Workflow automation?
- Set up automated threat responses in Azure Sentinel
Configure Security Policies
- Configure security settings by using Azure Policy
- Working with security policies
- Configure security settings by using Azure Blueprint
- Configure your environment for a Blueprint Operator
- Configure a playbook by using Azure Sentinel
- Create & run a playbook to automate threat responses
Secure Data and Applications (20-25%)
Configure Security for Storage
- Configure access control for storage accounts
- Assign an Azure role for access to blob and queue data
- Authorize access to blobs and queues using Azure Active Directory
- Configure key management for storage accounts
- Manage storage account access keys
- Manage storage account keys with Key Vault & CLI
- Configure Azure AD authentication for Azure Storage
- Azure AD Authentication for Azure Blobs and Queues
- Authorize access to blobs and queues using Azure Active Directory
- Configure Azure AD Domain Services authentication for Azure Files
- Enable Azure AD DS authentication on Azure Files
- Create and manage Shared Access Signatures (SAS)
- Getting Started with Shared Access Signatures (SAS)
- Grant limited access to Storage with Shared Access Signatures
- Create a shared access policy for a blob or blob container
- Define a stored access policy
- Create a stored access policy with .NET
- Configure Storage Service Encryption
- Azure Storage Service Encryption for Managed Disks
- Azure Storage Service Encryption for data at rest
Configure Security for Databases
- Enable database authentication
- Use Azure Active Directory authentication for SQL databases
- Enable database auditing
- Auditing for Azure SQL Database and Azure Synapse Analytics
- Configure Azure SQL Database Advanced Threat Protection
- Advanced Threat Protection for Azure SQL Database
- Configure Advanced Threat Protection for Azure SQL Database
- Implement database encryption
- Transparent data encryption for SQL Database
- Implement Azure SQL Database Always Encrypted
- Always Encrypted now generally available in Azure SQL Database
- Configure Always Encrypted by using Azure Key Vault
- Configure Always Encrypted by using the Windows certificate store
Configure and Manage Key Vault
- Manage access to Key Vault
- Secure access to Azure key vault
- Manage permissions to secrets, certificates, and keys
- About keys, secrets, and certificates
- Azure RBAC secret, key, & certificate permissions with Key Vault
- Configure RBAC usage in Azure Key Vault
- Provide access to Key Vault with Azure RBAC
- Secure access to Azure key vault
- Manage certificates
- Manage certificates via Azure Key Vault
- Manage secrets
- Configure and manage secrets in Azure Key Vault
- Manage keys and secrets
- Configure key rotation
- Automate the rotation of a secrets
- Backup and restore of Key Vault items
- Back up & restore individual key vault objects
This brings us to the end of the AZ-500 Microsoft Azure Security Technologies Study Guide
Follow Me to Receive Updates on AZ-500 Exam
Share the AZ-500 Study Guide in Your Network
Share on facebook
Share on twitter
Share on linkedin
