Prüfungsvorbereitung und Exam AZ-500 Microsoft Azure Security Technologies

AZ-500 (Microsoft Azure Security Technologies) ist die Microsoft Certified: Azure Security Engineer Associate-Zertifizierung. Diese intensive Schulung bereitet auf das Examen vor. Themen entsprechend Microsoft Skills Outline: 1. Manage Identity and Access (25-30%) — Microsoft Entra ID (Users, Groups, Roles, Conditional Access, MFA mit verschiedenen Methoden Authenticator/SMS/Voice/FIDO2/Passkeys, Identity Protection mit Risk Detection für User/Sign-in-Risks), Hybrid Identity (Entra Connect Sync, Pass-Through Authentication, Federation mit AD FS, Password Hash Synchronization), Application Identity Management (Service Principals, Managed Identities — System-assigned vs. User-assigned, Workload Identity Federation), Application Registrations und API Permissions, External Identities (B2B Collaboration mit Cross-Tenant Access Settings, B2C Identity Provider Setup). 2. Implement Platform Protection (20-25%) — Network Security (NSGs Network Security Groups mit Rules, ASGs Application Security Groups, Azure Firewall mit DNAT/SNAT/IDPS, Azure Firewall Manager, Azure WAF Web Application Firewall in Application Gateway oder Front Door, DDoS Protection Standard, Private Endpoints und Private Link, Service Endpoints, VPN Gateway Site-to-Site, ExpressRoute mit Private Peering), Compute Security (VM Security mit Microsoft Defender for Servers, Just-in-Time VM Access, Adaptive Application Controls, File Integrity Monitoring), Container Security (Defender for Containers, AKS Security mit Pod Security Standards, Network Policies, OPA Gatekeeper), App Service Security. 3. Manage Security Operations (25-30%) — Microsoft Defender for Cloud (Secure Score, Regulatory Compliance Dashboard mit ISO 27001/NIST/PCI-DSS/CIS-Benchmarks-Mapping, Workload Protection für VMs/Containers/Databases/Storage/AppService/KeyVault/DNS/Resource-Manager, Just-in-Time VM Access, Adaptive Application Controls). Microsoft Sentinel als Cloud-Native SIEM/SOAR (Data Connectors für 100+ Quellen, Analytics Rules — Scheduled/Microsoft Security/NRT/Fusion/Anomaly, Incidents-Workflow mit Investigation Graph, Hunting Queries mit KQL, Notebooks für Advanced Hunting, Workbooks für Dashboards, Watchlists, Threat Intelligence Integration, Playbooks für SOAR mit Logic Apps, UEBA User Entity Behavior Analytics). Azure Monitor für Logs (Log Analytics mit KQL), Azure Policy für Compliance-as-Code. 4. Secure Data and Applications (20-25%) — Storage Security (Encryption at Rest mit Microsoft-managed Keys vs. Customer-Managed Keys CMK mit Azure Key Vault, SAS Tokens mit kurzlebigen Stored Access Policies, Network Restrictions, Soft Delete und Versioning für Ransomware-Schutz), SQL Database Security (Authentication, Transparent Data Encryption TDE, Always Encrypted, Dynamic Data Masking, Row-Level Security, Auditing und Threat Detection mit Defender for SQL), Cosmos DB Security, Azure Key Vault (Keys/Secrets/Certificates, RBAC vs. Access Policies, HSM-backed Keys, Soft Delete und Purge Protection), Information Protection (Microsoft Purview Information Protection mit Sensitivity Labels). Examen AZ-500: ~50 Fragen, 100 Minuten, 700/1000 Pass.