Azure Security Engineer Associate (AZ-500) + MS-900

AZ-500 (Microsoft Azure Security Technologies) ist die Azure-Security-Engineer-Cert. Themen: 1. Manage Identity and Access (25-30%) — Microsoft Entra ID, Hybrid Identity, Application Identity (Service Principals, Managed Identities, Workload Identity Federation), External Identities (B2B, B2C). 2. Implement Platform Protection (20-25%) — Network Security (NSGs, ASGs, Azure Firewall, Azure WAF in App Gateway/Front Door, DDoS Protection Standard, Private Endpoints und Private Link, VPN Gateway, ExpressRoute), Compute Security (VM Security mit Defender for Servers, Just-in-Time VM Access, Adaptive Application Controls, File Integrity Monitoring), Container Security (Defender for Containers, AKS Security mit Pod Security Standards, Network Policies, OPA Gatekeeper), App Service Security. 3. Manage Security Operations (25-30%) — Microsoft Defender for Cloud (Secure Score, Regulatory Compliance Dashboard, Workload Protection für VMs/Containers/DBs/Storage/AppService/KeyVault/DNS), Microsoft Sentinel als SIEM/SOAR (Data Connectors, Analytics Rules, Incidents-Workflow, Hunting Queries mit KQL, Workbooks, Watchlists, Playbooks für SOAR, UEBA). Azure Monitor für Logs (Log Analytics mit KQL), Azure Policy für Compliance-as-Code. 4. Secure Data and Applications (20-25%) — Storage Security (Encryption at Rest mit CMK, SAS Tokens, Network Restrictions, Soft Delete), SQL Database Security (Auth, TDE, Always Encrypted, Dynamic Data Masking, RLS, Auditing, Defender for SQL), Cosmos DB Security, Azure Key Vault (Keys/Secrets/Certificates, RBAC vs. Access Policies, HSM-backed Keys), Information Protection (Microsoft Purview Sensitivity Labels). Examen AZ-500. MS-900 (3 Tage): M365 Fundamentals.