Excel at AZ-500 and implement multi-layered security controls to protect against rapidly evolving threats to Azure environments – now with the the latest updates to the certification Key FeaturesMaster AZ-500 exam objectives and learn real-world Azure security strategiesDevelop practical skills to protect your organization from constantly evolving security threatsEffectively manage security governance, policies, and operations in AzureBook Description Exam preparation for the AZ-500 means you'll need to master all aspects of the Azure cloud platform and know how to implement them. With the help of this book, you'll gain both the knowledge and the practical skills to significantly reduce the attack surface of your Azure workloads and protect your organization from constantly evolving threats to public cloud environments like Azure. While exam preparation is one of its focuses, this book isn't just a comprehensive security guide for those looking to take the Azure Security Engineer certification exam, but also a valuable resource for those interested in securing their Azure infrastructure and keeping up with the latest updates. Complete with hands-on tutorials, projects, and self-assessment questions, this easy-to-follow guide builds a solid foundation of Azure security. You'll not only learn about security technologies in Azure but also be able to configure and manage them. Moreover, you'll develop a clear understanding of how to identify different attack vectors and mitigate risks. By the end of this book, you'll be well-versed with implementing multi-layered security to protect identities, networks, hosts, containers, databases, and storage in Azure – and more than ready to tackle the AZ-500. What you will learnManage users, groups, service principals, and roles effectively in Azure ADExplore Azure AD identity security and governance capabilitiesUnderstand how platform perimeter protection secures Azure workloadsImplement network security best practices for IaaS and PaaSDiscover various options to protect against DDoS attacksSecure hosts and containers against evolving security threatsConfigure platform governance with cloud-native toolsMonitor security operations with Azure Security Center and Azure SentinelWho this book is for This book is a comprehensive resource aimed at those preparing for the Azure Security Engineer (AZ-500) certification exam, as well as security professionals who want to keep up to date with the latest updates. Whether you're a newly qualified or experienced security professional, cloud administrator, architect, or developer who wants to understand how to secure your Azure environment and workloads, this book is for you. Beginners without foundational knowledge of the Azure cloud platform might progress more slowly, but those who know the basics will have no trouble following along.

Prepare for Microsoft Exam AZ-304—and help demonstrate your real-world mastery of designing and implementing solutions that run on Microsoft Azure, including key aspects such as compute, network, storage, and security. Designed for modern IT professionals, this Exam Ref focuses on the critical thinking and decision-making acumen needed for success at the Microsoft Certified Expert level. Focus on the expertise measured by these objectives: • Design monitoring • Design identity and security • Design data storage • Design business continuity • Design infrastructure This Microsoft Exam Ref: • Organizes its coverage by exam objectives • Features strategic, what-if scenarios to challenge you • Assumes you are an IT professional with significant experience and knowledge of IT operations, and expert-level Azure administration skills, and experience with Azure development and DevOps processes About the Exam Exam AZ-304 focuses on knowledge needed to design for cost optimization; design logging and monitoring solutions; design authentication, authorization, governance, and application security; design database solutions and data integrations; select storage accounts; design for backup/recovery and high availability; design compute and network infrastructure; design application architectures, and design migrations. About Microsoft Certification Passing this exam and Exam AZ-303: Microsoft Azure Architect Technologies fulfills your requirements for the Microsoft Certified: Azure Solutions Architect Expert credential, demonstrating your expertise in compute, network, storage, and security for designing and implementing modern cloud-based solutions that run on Microsoft Azure. See full details at: microsoft.com/learn

Discover high-value Azure security insights, tips, and operational optimizations This book presents comprehensive Azure Security Center techniques for safeguarding cloud and hybrid environments. Leading Microsoft security and cloud experts Yuri Diogenes and Dr. Thomas Shinder show how to apply Azure Security Center’s full spectrum of features and capabilities to address protection, detection, and response in key operational scenarios. You’ll learn how to secure any Azure workload, and optimize virtually all facets of modern security, from policies and identity to incident response and risk management. Whatever your role in Azure security, you’ll learn how to save hours, days, or even weeks by solving problems in most efficient, reliable ways possible. Two of Microsoft’s leading cloud security experts show how to: • Assess the impact of cloud and hybrid environments on security, compliance, operations, data protection, and risk management • Master a new security paradigm for a world without traditional perimeters • Gain visibility and control to secure compute, network, storage, and application workloads • Incorporate Azure Security Center into your security operations center • Integrate Azure Security Center with Azure AD Identity Protection Center and third-party solutions • Adapt Azure Security Center’s built-in policies and definitions for your organization • Perform security assessments and implement Azure Security Center recommendations • Use incident response features to detect, investigate, and address threats • Create high-fidelity fusion alerts to focus attention on your most urgent security issues • Implement application whitelisting and just-in-time VM access • Monitor user behavior and access, and investigate compromised or misused credentials • Customize and perform operating system security baseline assessments • Leverage integrated threat intelligence to identify known bad actors

Master a complete strategy for protecting any Azure cloud network environment! Network security is crucial to safely deploying and managing Azure cloud resources in any environment. Now, two of Microsoft's leading experts present a comprehensive, cloud-native approach to protecting your network, and safeguarding all your Azure systems and assets. Nicholas DiCola and Anthony Roman begin with a thoughtful overview of network security's role in the cloud. Next, they offer practical, real-world guidance on deploying cloud-native solutions for firewalling, DDOS, WAF, and other foundational services – all within a best-practice secure network architecture based on proven design patterns. Two of Microsoft's leading Azure network security experts show how to: Review Azure components and services for securing network infrastructure, and the threats to consider in using them Layer cloud security into a Zero Trust approach that helps limit or contain attacks Centrally direct and inspect traffic with the managed, stateful, Platform-as-a-Service Azure Firewall Improve visibility into Azure traffic with Deep Packet Inspection Optimize the way network and web application security work together Use Azure DDoS Protection (Basic and Standard) to mitigate Layer 3 (volumetric) and Layer 4 (protocol) DDoS attacks Enable log collection for Firewall, DDoS, WAF, and Bastion; and configure NSG Flow Logs and Traffic Analytics Continually monitor network security with Azure Sentinel, Security Center, and Network Watcher Customize queries, playbooks, workbooks, and alerts when Azure's robust out-of-the-box alerts and tools aren't enough Build and maintain secure architecture designs that scale smoothly to handle growing complexity About This Book For Security Operations (SecOps) analysts, cybersecurity/information security professionals, network security engineers, and other IT professionals For individuals with security responsibilities in any Azure environment, no matter how large, small, simple, or complex

Prepare for Microsoft Exam DP-900 Demonstrate your real-world foundational knowledge of core data concepts and how they are implemented using Microsoft Azure data services. Designed for business users, functional consultants, and other professionals, this Exam Ref focuses on the critical thinking and decision-making acumen needed for success at the Microsoft Certified: Azure Data Fundamentals level. Focus on the expertise measured by these objectives: Describe core data concepts Describe how to work with relational data on Azure Describe how to work with non-relational data on Azure Describe an analytics workload on Azure This Microsoft Exam Ref: Organizes its coverage by exam objectives Features strategic, what-if scenarios to challenge you Assumes you have foundational knowledge of core data concepts and their implementation with Microsoft Azure data services, and are beginning to work with data in the cloud About the Exam Exam DP-900 focuses on core knowledge for describing fundamental database concepts and skills for cloud environments; cloud data services within Azure; cloud data roles, tasks, and responsibilities; Azure relational and non-relational data offerings, provisioning, and deployment; querying Azure relational databases; working with Azure non-relational data stores; building modern Azure data analytics solutions; and exploring Azure Data Factory, Azure Synapse Analytics, Azure Databricks, and Azure HDInsight. About Microsoft Certification Passing this exam fulfills your requirements for the Microsoft Certified: Azure Data Fundamentals certification, demonstrating your understanding of the core capabilities of Azure data services and their use with relational data, non-relational data, and analytics workloads. See full details at: www.microsoft.com/learn

Prepare for the updated version of Microsoft Exam AZ-900 and help demonstrate your real-world knowledge of cloud services and how they can be provided with Microsoft Azure, including high-level concepts that apply throughout Azure, and key concepts specific to individual services. Designed for professionals in both non-technical or technical roles, this Exam Ref focuses on the critical thinking and decision-making acumen needed for success at the Microsoft Certified Fundamentals level. Focus on the expertise measured by these objectives: Describe cloud concepts Describe Azure architecture and services Describe Azure management and governance This Microsoft Exam Ref: Organizes its coverage by exam objectives Features strategic, what-if scenarios to challenge you Assumes you want to show foundational knowledge of cloud services and their delivery with Microsoft Azure About the Exam Exam AZ-900 focuses on knowledge needed to describe cloud computing; the benefits of using cloud services; cloud service types; core Azure architectural components; Azure compute, networking, and storage services; Azure identity, access, and security; Azure cost management; Azure features and tools for governance and compliance, and for managing and deploying resources; and Azure monitoring tools. About Microsoft Certification Passing this exam fulfills your requirements for the Microsoft Certified: Azure Fundamentals credential, validating your basic knowledge of cloud services and how those services are provided with Azure. Whether you're new to the fi eld or a seasoned professional, demonstrating this knowledge can help you jump-start your career and prepare you to dive deeper into the many technical opportunities Azure offers.

Start empowering users and protecting corporate data, while managing identities and access with Microsoft Azure in different environments Key FeaturesUnderstand how to identify and manage business drivers during transitionsExplore Microsoft Identity and Access Management as a Service (IDaaS) solutionOver 40 playbooks to support your learning process with practical guidelinesBook Description Microsoft Azure and its Identity and access management are at the heart of Microsoft's software as service products, including Office 365, Dynamics CRM, and Enterprise Mobility Management. It is crucial to master Microsoft Azure in order to be able to work with the Microsoft Cloud effectively. You’ll begin by identifying the benefits of Microsoft Azure in the field of identity and access management. Working through the functionality of identity and access management as a service, you will get a full overview of the Microsoft strategy. Understanding identity synchronization will help you to provide a well-managed identity. Project scenarios and examples will enable you to understand, troubleshoot, and develop on essential authentication protocols and publishing scenarios. Finally, you will acquire a thorough understanding of Microsoft Information protection technologies. What you will learnApply technical descriptions to your business needs and deploymentsManage cloud-only, simple, and complex hybrid environmentsApply correct and efficient monitoring and identity protection strategiesDesign and deploy custom Identity and access management solutionsBuild a complete identity and access management life cycleUnderstand authentication and application publishing mechanismsUse and understand the most crucial identity synchronization scenariosImplement a suitable information protection strategyWho this book is for This book is a perfect companion for developers, cyber security specialists, system and security engineers, IT consultants/architects, and system administrators who are looking for perfectly up–to-date hybrid and cloud-only scenarios. You should have some understanding of security solutions, Active Directory, access privileges/rights, and authentication methods. Programming knowledge is not required but can be helpful for using PowerShell or working with APIs to customize your solutions.