AZ‐500 Microsoft Azure Security Technologies Study Guide_10 - itnett/FTD02H-N GitHub Wiki

🛣️ AZ-500 Study Roadmap

📅 Suggested Study Plan

Week 1: Azure Identity and Access Management

  • 🔑 Day 1-3: Azure Active Directory (AD), Privileged Identity Management (PIM), Conditional Access
  • 🔍 Day 4-5: Azure AD Roles, Access Reviews, Multi-Factor Authentication (MFA)
  • ⚙️ Day 6-7: Azure AD Connect (Hybrid), Federation, Pass-Through Authentication

Week 2: Platform Protection

  • 🛑 Day 1-2: Network Security Groups (NSGs), Application Security Groups (ASGs), Firewalls
  • 🌐 Day 3-4: Azure DDoS Protection, WAF, Security Center Integration
  • 🔐 Day 5-7: Azure Key Vault, Secrets Management, Disk Encryption

Week 3: Data and Application Security

  • 📦 Day 1-2: Azure Storage Security, Azure SQL Security
  • 🖥️ Day 3-4: Azure Application Security (App Service, Function Apps, Logic Apps)
  • 🔄 Day 5-7: Automating security with Azure DevOps, CI/CD pipelines, Runbooks

Week 4: Governance and Monitoring

  • 🛠️ Day 1-3: Azure Blueprints, Role-Based Access Control (RBAC), Policies
  • 📊 Day 4-5: Azure Monitor, Log Analytics, Alerts, Diagnostic Logs
  • ⚖️ Day 6-7: Azure Security Center, Azure Defender, Security Score