MEAPSA

Plan and implement advanced security for compute

This module is designed to provide administrators with the knowledge and skills needed to plan and implement advanced security measures for Azure compute resources, safeguarding applications and data against evolving security threats.

Administrator

Security Engineer

Azure

Microsoft Defender

Disk Encryption

Virtual Machines

Update Manager

Microsoft Defender for Cloud

Module Objectives

By the end of this module, participants will be able to:

Enhance Azure compute resources' security against vulnerabilities and attacks with advanced measures.
Secure remote access via Azure Bastion and JIT VM access, and implement network isolation for AKS.
Strengthen AKS clusters' security, monitor Azure Container Instances and Apps, and manage access to Azure Container Registry.
Implement disk encryption methods like ADE and manage API access securely in Azure API Management.

Units

Introduction min
Plan and implement remote access to public endpoints, Azure Bastion and just-in-time (JIT) virtual machine (VM) access min
Configure network isolation for Azure Kubernetes Service (AKS) min
Secure and monitor Azure Kubernetes Service min
Configure authentication for Azure Kubernetes Service min
Configure security for Azure Container Instances (ACIs) min
Configure security for Azure Container Apps (ACAs) min
Manage access to Azure Container Registry (ACR) min
Configure disk encryption, Azure Disk Encryption (ADE), encryption as host, and confidential disk encryption min
Recommend security configurations for Azure API Management min
Knowledge check min
Summary min

Prerequisites

None