Tag: Azure Security

AZ-500 Microsoft Certified Azure Security Engineer Associate

Passed Exam AZ-500 Microsoft Certified Azure Security Engineer Associate

The new Azure Security exam just came out of beta, and I took some time to learn and see if I would pass it. I am happy that I just passed exam AZ-500: Microsoft Azure Security Technologies, which focuses on Microsoft Azure security engineers who implement security controls, maintain the security posture, manages identity and access and protects data, applications, and networks. After passing this exam, you can call yourself a Microsoft Certified: Azure Security Engineer Associate. Azure Security Engineers implement security controls and threat protection, manage identity and access, and protect data, applications, and networks in cloud and hybrid environments as part of the end-to-end infrastructure. That means this exam covers different topics across the Azure infrastructure and many various Azure services like Azure AD, Azure IaaS, Azure Networking, Azure Kubernetes Service (AKS), Databases, Azure Monitor, Azure Security Center and many more.

Exam AZ-500: Microsoft Azure Security Technologies

Candidates identify and remediate vulnerabilities by using a variety of security tools, implements threat protection, and responds to security incident escalations. As a Microsoft Azure security engineer, candidates often serve as part of a larger team dedicated to cloud-based management and security and may also secure hybrid environments as part of an end-to-end infrastructure.

Candidates for this exam should have strong skills in scripting and automation, a deep understanding of networking, virtualization, and cloud N-tier architecture, and a strong familiarity with cloud capabilities, Microsoft Azure products and services, and other Microsoft products and services.

You can find more detailed information on the Microsoft exam website. There you will find all the skills measured in this exam.

How to prepare for the AZ-500 exam

Microsoft Learn

Microsoft Learn

Exams always have a specific focus; this one covers a broad set of Azure security topics over different Azure services. This means you not only need to have particular security know-how, but also a good overview of the various Azure services. If you don’t have that right now, I recommend that you might start with other exams, such as AZ-900 and AZ-10X for the Microsoft Certified: Azure Administrator Associate. But if you want to go forward with the AZ-500 exam and become a Microsoft Certified: Azure Security Engineer Associate, first have a look at the more detailed information on the Microsoft exam website. Start reading through the Microsoft Docs about the different security topics mentioned in the skills measured, and also get some hands-on experience by trining out the various technologies. My favorite place to learn and understand some tutorials about different topics is Microsoft Learn! On Microsoft learn, you can use a lot of different learning modules, and some of them are focused on Azure Security. If you want to know more about Microsoft learn, check out my blog post: Microsoft Learn – A Great Place To Learn!

At Microsoft Ignite The Tour, our team also presented a session on securing your Azure environment, my session in Amsterdam was recorded, you can watch it here: Microsoft Ignite The Tour 2019 Azure Hybrid Session Recordings.

Are you also interested in becoming Microsoft Azure Certified? Check out my blog posts about why you should become Microsoft Azure Certified, how to pick the right Azure exam certification path and how to prepare and pass a Microsoft Azure certification exam. With that, I wish you happy learning and good luck with the AZ-500 Microsoft Azure Security Technologies exam!



Microsoft Ignite The Tour Amsterdam 2019 Thomas Maurer Speaking

Microsoft Ignite The Tour 2019 Azure Hybrid Session Recordings

As you might know, had the chance to present my first sessions as a Microsoft employee at Microsoft Ignite The Tour 2019 in London and Amsterdam. A couple of weeks ago, the session recordings from Amsterdam are now available. My sessions were part of the Azure Hybrid Cloud learning path.

Building and maintaining your Azure hybrid environment
Tailwind Traders has seen exponential growth over the last two years, transitioning from a midsize company to a worldwide corporation. This growth has required extending Tailwind’s existing infrastructure into Microsoft Azure in a hybrid deployment, with some important workloads remaining in the organization’s on-premises datacenter, while increasing numbers of critical workloads running in Azure.

In the five modules for this learning path, you’ll learn how to plan and configure hybrid network connectivity, apply best practice security configuration to Azure resources, learn how to effectively monitor and maintain those resources, ensure that those resources meet organizational compliance requirements, and ensure that workloads in Azure are highly available and protected against catastrophe.

Sessions at Microsoft Ignite The Tour 2019

HYB10 - Planning and implementing hybrid network connectivity

Once your organization has decided to implement a hybrid model, you need to start figuring out how to ensure that communication between your on-premises environment and your hybrid workloads is both secure and reliable. You also need to ensure that those workloads are protected from internal and external network threats. In this module, you’ll learn how to assess your organization’s on-prem network infrastructure, how to plan and then implement an appropriate networking design for Azure. You’ll learn how to implement appropriate Azure virtual network technologies, including securing connectivity between on-premises and Azure using VPNs and ExpressRoute as well as how to strategically deploy firewalls, network security groups and marketplace appliances to protect those resources and workloads.

HYB20 - Securing your Azure environment

With Cloud resources now connected with our datacenter, secure administrative access to critical workloads needs to be configured appropriately. It’s also important from an organizational and compliance perspective to ensure that workloads have a security configuration aligned with industry best practice. In this module, you’ll learn how to improve the security of privileged accounts used to manage Azure resources, manage software updates for both on-premises and cloud hosted virtual machines, and how to get the most out of Azure Security Center for assessing and remediating security configuration issues in a hybrid environment.

You can find more  Microsoft Ignite The Tour recordings on the offical website.



Microsoft Certified Azure Administrator Associate

Passed AZ-103 Microsoft Certified Azure Administrator

After the announcement of the new Microsoft Azure certifications at Microsoft Inspire in Las Vegas, I decided to take the beta exam, which was available to upgrade my current Azure certifications. Since I had already passed Exam 70-533 Implementing Microsoft Azure Infrastructure Solutions, I needed exam AZ-102 to do the transition. Today I got confirmation that I passed the Microsoft exam AZ-102 and earned the Microsoft Certified Azure Administrator Associate certification. Since that time, Microsoft changed the exams, and you will now need to take exam AZ-103 to get the Microsoft Certified: Azure Administrator certification. The overall content and exam subjects are still the same, but instead of taking two exams, AZ-100 and AZ-101, you only need to take AZ-103.

I already took the new available beta Exam for the Microsoft Certified Azure Architect at Microsoft Ignite; however, for the results, I still need to wait a bit.

What is Exam AZ-103 Microsoft Certified: Azure Administrator Associate

The new certifications are based on different job roles, like Azure Administrator, Azure Developer, and Azure Architect. You can read more about the new Azure Certifications here on my blog.

Earning Azure Administrator Associate certification demonstrates understanding of services across the IT lifecycle, and ability to take requests for infrastructure services, applications, and environments. Candidates for this certification are typically Azure Administrators who manage cloud services spanning storage, security, networking, and compute cloud capabilities. They recommend services to use for optimal performance and scale, as well as provision, size, monitor, and adjust resources.

This is excellent news to start in the day while I am flying to a customer in Paris today for some more Azure work. You can find out more about the Azure Administrator Associate here.

Exam Preparation

The skills measured in AZ-103 are a mix of the former AZ-100 and AZ-101 and will focus on Azure Infrastructure and deployment, Azure Integration, and Azure Security. If you are just getting started with Microsoft Azure, I recommend that you take first the exam AZ-900 Azure Fundamentals. This is not a required exam, but it is a great way to validate your knowledge. However, if you feel comfortable you can also directly start with the Azure Administrator Associate exam. To prepare for the Azure Fundamentals exam, check out the following Microsoft Learn module.

I often get asked how I prepared for exams such as this. It makes sense to certify the knowledge you already have. I usually use Microsoft free online courses on Channel 9, Virtual Academy and now the new Microsoft Learn. However, I realized that also the Azure Documentation is a great resource to learn. I recommend you check the skills needed for the exam, in this case, AZ-103 and read the specific Azure Documentation for these topics, and also try it out. The best training and learning experience you always get by trying things out. You will not just learn the specific subject you are looking on, but you will also learn a lot about other related topics.

AZ-103 Microsoft Learn Certified Azure Administrator

Microsoft Learn Azure Administrator

Microsoft Learn gives you the chance to filter the modules by related topics and is one of the best, if not the best starting point for the AZ-103: Microsoft Azure Administrator exam.

Are you also interested in becoming Microsoft Azure Certified? Check out my blog posts about why you should become Microsoft Azure Certified, how to pick the right Azure exam certification path and how to prepare and pass a Microsoft Azure certification exam. I hope this helps you to prepare and study for the AZ-103 exam and if you have any questions, please let me know in the comments.