Microsoft Cloud Security Training in Thimphu, Bhutan

This course provides in-depth, hands-on training to prepare participants for securing Microsoft Azure environments. It covers identity and access management, platform protection, network security, data security, threat protection, and governance using native Azure security services. Ideal for IT administrators, security engineers, and cloud professionals preparing for the AZ-500 certification.

Introduction to Azure Security

• Overview of the Azure security model

• Shared responsibility model

• Azure Security Center & Defender for Cloud overview

• Zero Trust architecture basics

Managing Identity and Access

• Securing Azure Active Directory

• Conditional Access policies

• Multi-Factor Authentication (MFA)

• Privileged Identity Management (PIM)

• Identity Governance

• Role-based access control (RBAC)

• Managing external and guest acces

Platform Protection

• Azure VM security best practices

• Endpoint protection

• Disk encryption (Azure Disk Encryption, BitLocker)

• VM and container updates & patching

• Secure images & Azure Image Builder

• Secure container deployment (AKS security)

Network Security

• Azure Firewall configuration

• Network Security Groups (NSG) & Application Security Groups

• DDoS Protection

• Web Application Firewall (WAF)

• Service Endpoints & Private Endpoints

• Virtual WAN and VPN security

Data and Storage Security

• Azure Storage encryption

• Key Vault for secrets, certificates, and key management

• Managed Identities for secure application access

• Data Loss Prevention (DLP) concepts

• Storage account shared access signatures (SAS)

• Backups & recovery security practices

Threat Protection & Monitoring

• Defender for Cloud in-depth

• Security posture management (CSPM)

• Threat analytics and recommendations

• Azure Monitor & Log Analytics

• Azure Sentinel (Microsoft Sentinel) basics

• Investigating incidents

• Automating response with Logic Apps

Governance, Compliance & Security Policies

• Azure Policy creation and management

• Blueprints and resource compliance

• Managing regulatory compliance in Azure

• Cost governance and security impact

• Security baselines for workloads

Hands-on Exercises

Summary and Conclusion