Microsoft Azure Cloud Security Specialist Certification

Module 1: Microsoft Azure Security Fundamentals

• Cloud security principles
• Shared Responsibility Model
• Microsoft Azure security architecture
• Security best practices
• Risk management

Module 2: Identity and Access Management

• Microsoft Entra ID
• Role-Based Access Control (RBAC)
• Privileged Identity Management (PIM)
• Multi-Factor Authentication (MFA)
• Conditional Access

Module 3: Azure Governance and Resource Security

• Management Groups
• Azure Policy
• Resource Locks
• Resource organization
• Governance best practices

Module 4: Network Security

• Virtual Network (VNet)
• Network Security Groups (NSGs)
• Azure Firewall
• Azure DDoS Protection
• Secure network architecture

Module 5: Data Protection

• Azure Key Vault
• Encryption at rest
• Encryption in transit
• Disk Encryption
• Data protection strategies

Module 6: Compute Security

• Azure Virtual Machine security
• Microsoft Defender for Cloud
• Just-in-Time VM Access
• Secure configuration
• Workload protection

Module 7: Container Security

• Azure Kubernetes Service (AKS) security
• Azure Container Registry security
• Image scanning
• Kubernetes RBAC
• Runtime protection

Module 8: Application Security

• Secure application architecture
• API Management security
• Managed Identities
• Authentication
• Secure coding practices

Module 9: Security Monitoring

• Azure Monitor
• Microsoft Sentinel
• Log Analytics
• Security dashboards
• Alert management

Module 10: Threat Detection

• Microsoft Defender for Cloud
• Microsoft Sentinel analytics
• Threat intelligence
• Security recommendations
• Vulnerability assessment

Module 11: Compliance and Governance

• Azure Policy
• Regulatory compliance concepts
• Audit logging
• Security baselines
• Governance frameworks

Module 12: Security Operations

• Security Operations Center (SOC) concepts
• Incident response workflow
• Investigation techniques
• Recovery planning
• Operational security

Module 13: Web and API Protection

• Azure Web Application Firewall (WAF)
• Application Gateway
• API protection
• Traffic filtering
• DDoS mitigation

Module 14: Secure Storage Services

• Azure Blob Storage security
• Storage access control
• Shared Access Signatures (SAS)
• Secure file storage
• Data lifecycle management

Module 15: Database Security

• Azure SQL Database security
• Azure Cosmos DB security
• Encryption
• Database auditing
• Secure connectivity

Module 16: DevSecOps

• Secure CI/CD pipelines
• Azure DevOps security
• GitHub security integration
• Secret management
• Infrastructure security

Module 17: Security Automation

• Azure Automation
• Microsoft Defender automation
• Logic Apps
• Event-driven security workflows
• Automated remediation

Module 18: Incident Response

• Security incident lifecycle
• Root cause analysis
• Digital investigation
• Recovery procedures
• Business continuity

Module 19: Security Optimization

• Security posture improvement
• Configuration reviews
• Performance and security balance
• Cost optimization
• Continuous improvement

Module 20: Enterprise Security Architecture

• Zero Trust architecture
• Hybrid cloud security
• Multi-subscription security
• Enterprise security design
• Cloud security best practices