• Benefits and key considerations of cloud adoption

• Service delivery models: IaaS, PaaS, and SaaS

• Azure tools and portals (Azure CLI, PowerShell, Portal)

• Core identity concepts and Azure AD basics

• Azure pricing structure and support options

• Planning and managing costs effectively

• Understanding Azure regions and availability zones

• Azure Resource Manager (ARM)

• Defense in Depth: layered security approach

• Security layers within Azure

• Compliance standards and regulatory requirements

• Azure accounts and subscription management

• Naming conventions and resource tagging best practices

• Subscription configuration and resource governance

• Role-Based Access Control (RBAC) fundamentals

• Monitoring with Azure Monitor and Log Analytics

• Security posture management with Azure Security Center

• Policy management and governance with Azure Policy

Hands-On Labs:

• Create and configure Azure trial account

• Manage quotas, cost analysis, and tagging

• Configure monitoring, alerts, and activity logs

• Set up billing alerts and cost management

• Apply subscription policies

• Implement RBAC for access control

• Configure Azure Monitor alerts and log analytics

• Threat detection and response in Azure Security Center

• Apply and enforce Azure Policy

• Implement resource locks

• Fundamentals of Azure networking

• Network security and isolation concepts

• Network Security Groups (NSGs)

• Cross-site connectivity (VPNs, ExpressRoute)

• Azure load balancing services

• Azure Firewall overview and use cases

• Distributed Denial of Service (DDoS) protection

Hands-On Labs:

• Create and configure VNets and subnets via Portal and PowerShell

• Implement user-defined routes and VNet peering

• Configure NSGs for traffic filtering

• Enable cross-site connectivity

• Deploy and configure Azure Load Balancer

• Configure Azure DNS and Application Gateway

• Implement Azure Firewall

Topics Covered (Theory):

• Introduction to Azure Virtual Machines (VMs)

• VM configuration: networking, storage, and extensions

• Availability and scalability options for VMs

• Disk encryption with Azure Key Vault

• VM security best practices

Hands-On Labs:

• Create and connect to Azure VMs (Windows & Linux)

• Deploy VM images and custom images

• Configure VM networking and storage

• Set up Azure Key Vault for disk encryption

• Apply disk encryption policies

• Manage VMs with Security Center

• Perform VM hardening practices

• Azure storage account fundamentals

• Configuring storage permissions and access controls

• Encryption with customer-managed keys and Key Vault

• Overview of Azure Backup and Recovery services

Hands-On Labs:

• Create and configure storage accounts via portal

• Use Azure Storage Explorer

• Generate and manage Shared Access Signatures (SAS)

• Configure Azure File and Sync services

• Implement Azure Backup and Recovery

• Azure Active Directory (AD) overview

• Azure AD Connect and hybrid identity concepts

• Authentication options in Azure

• Service Principals and application identities

• Identity protection strategies

• Privileged Identity Management (PIM)

Hands-On Labs:

• Create and configure Azure AD tenant

• Move subscriptions between directories

• Create and manage users and groups

• Implement Azure AD Connect

• Monitor with AD Connect Health

• Create service principals and register applications

• Configure identity protection policies

• Enable and manage PIM