3-Secure Compute, Storage, and Databases (20-25%).md

AZ-500: Secure compute, storage, and databases (20–25%)

Configure container security

• Configure network - Enable containers to use Azure Virtual Network capabilities
• Configure authentication
• Configure container isolation | Isolation Modes | PDF
• Configure AKS security
• Configure Container Registry | FAQ
• Implement vulnerability management

Configure Security Policies to Manage Data

• Configure Data Classification | Tutorial
• Configure Data Retention | Learn about retention policies
• Configure Data Sovereignty
• Azure customer data protection

Configure Security for Data Infrastructure

• Enable Database Authentication
• Enable Database Auditing
• Configure Azure SQL Database Advanced Threat Protection | Overview
• Configure Access Control for Storage Accounts
• Configure Key Management for Storage Accounts
• Configure Azure AD Authentication for Azure Storage
• Configure Azure AD Domain Services Authentication for Azure Files
• Create and manage Shared Access Signatures (SAS)
• Configure security for HDInsights
• Configure security for Cosmos DB
• Configure security for Azure Data Lake | Gen1

Configure Encryption for Data at Rest

• Implement Azure SQL Database Always Encrypted
• Implement Database Encryption - Transparent Data Encryption (TDE)
• Implement Storage Service Encryption
• Implement Disk Encryption

Return to Table of Contents