In this module, you will work with a group to design an end-to-end solution that leverages many of Microsoft Azure’s security features. At the end of this module, you will be better able to design and recommend solutions that help organizations properly secure their cloud-based applications while protecting their sensitive data.

In this module, you will implement many of the Azure Security Center features to secure their cloud-based Azure infrastructure (IaaS) and applications (PaaS). Specifically, you will ensure that any internet exposed resources have been properly secured and any non-required internet access disabled. Additionally, you will implement a “jump machine” for administrators with Application Security enabled to prevent those same administrators from installing non-approved software and potentially exposing cloud resources. You will then utilize custom alerts to monitor for TCP/IP Port Scans to fire alerts.
At the end of this module, you will be better able to design and build secure cloud-based architectures, and to improve the security of existing applications hosted within Azure.