Secure Your Data at Rest

This course is part of Microsoft Azure Security Engineer Associate (AZ-500) Professional Certificate

Instructor: Microsoft

Access provided by Masterflex LLC, Part of Avantor

2,259 already enrolled

5 modules

Gain insight into a topic and learn the fundamentals.

15 reviews

Intermediate level

Recommended experience

2 weeks to complete

at 10 hours a week

Flexible schedule

Learn at your own pace

5 modules

Gain insight into a topic and learn the fundamentals.

15 reviews

Intermediate level

Recommended experience

2 weeks to complete

at 10 hours a week

Flexible schedule

Learn at your own pace

What you'll learn

Deploy shared access signatures (SAS).
Enable and monitor database auditing.
Enable Defender for SQL for advanced threat protection.
Deploy an Always Encrypted implementation.

Skills you'll gain

Tools you'll learn

Details to know

Shareable certificate

Add to your LinkedIn profile

Assessments

14 assignments¹

AI Graded see disclaimer

Taught in English

See how employees at top companies are mastering in-demand skills

Learn more about Coursera for Business

logos of Petrobras, TATA, Danone, Capgemini, P&G and L'Oreal

Build your Cloud Computing expertise

This course is part of the Microsoft Azure Security Engineer Associate (AZ-500) Professional Certificate

When you enroll in this course, you'll also be enrolled in this Professional Certificate.

Learn new concepts from industry experts
Gain a foundational understanding of a subject or tool
Develop job-relevant skills with hands-on projects
Earn a shareable career certificate from Microsoft

There are 5 modules in this course

Secure Your Data at Rest is the fifth course in the Microsoft Azure Security Engineer Associate Professional Certificate training program. This course teaches storage security, data sovereignty, database monitoring, encryption, data masking, and using Defender for Cloud for advanced threat protection. You must secure data at rest as this will safeguard sensitive information, prevent unauthorized access, meet regulatory compliance, and ensure data confidentiality and integrity.

By the end of this course, you will be able to: - Deploy shared access signatures (SAS). - Generate SAS tokens. - Manage storage account access keys and key rollover. - Manage Azure Active Directory storage authentication. - Implement storage service encryption. - Configure blob data retention policies. - Configure Azure Files authentication. - Enable SQL database authentication with Azure Active Directory. - Monitor your database. - Enable and monitor database auditing. - Implement data discovery and classification. - Enable Defender for SQL for advanced threat protection. - Secure your data with dynamic data masking. - Implement transparent data encryption. - Deploy an Always Encrypted implementation.

In this module, you will gain an understanding about storage security and data sovereignty and how data sovereignty is achieved in Azure. You will learn how to deploy shared access signatures (SAS) and generate and test SAS tokens. You will also understand about storage access policies and how to create these policies. You will learn how to manage storage account access keys and key rollover.

What's included

11 videos9 readings4 assignments1 discussion prompt

11 videos Total 61 minutes

Course introduction 5 minutes
What is storage security? 6 minutes
Define data sovereignty 6 minutes
Overview of Azure Storage access 8 minutes
Shared access signatures 6 minutes
Deploy shared access signatures 3 minutes
What are shared keys? 3 minutes
Test key rollover 7 minutes
Overview of stored access policies 7 minutes
Create stored access policies 5 minutes
Module summary 5 minutes

9 readings Total 104 minutes

How to be successful in this course 6 minutes
Generate shared access signature tokens 10 minutes
Exercise: Generate shared access signature tokens 10 minutes
Solution: Generate shared access signature tokens 10 minutes
Manage storage account access keys 8 minutes
Exercise: Test key rollover 15 minutes
Solution: Test key rollover 5 minutes
Exercise: Create stored access policies 20 minutes
Solution: Create stored access policies 20 minutes

4 assignments Total 75 minutes

Knowledge check: Shared access signature tokens 15 minutes
Knowledge check: Shared keys 15 minutes
Knowledge check: Storage access policies 15 minutes
Module quiz: Storage security 30 minutes

1 discussion prompt Total 10 minutes

Meet and greet 10 minutes

In this module, you will learn how to configure Azure AD user account authentication for storage. You will learn how to implement storage service encryption - while the data is at rest and in transit. You will explore the difference between blobs and files. You will also learn how to configure blob data retention policies, Azure files authentication, and a storage account to accept requests from secure connections only by enabling the secure transfer required property. You will also understand how to secure a storage endpoint.

What's included

5 videos8 readings3 assignments

5 videos Total 26 minutes

Manage Azure AD storage authentication 7 minutes
Implement Azure Storage service encryption 6 minutes
Configure blob data retention policies 5 minutes
Enable the Secure transfer required property 5 minutes
Module summary 4 minutes

8 readings Total 91 minutes

Azure AD user account authentication 8 minutes
Exercise: Authenticate Azure AD user account for storage 20 minutes
Solution: Authenticate Azure AD user account for storage 20 minutes
Review the difference between blobs and files 7 minutes
Configure Azure Files authentication 5 minutes
Storage security configurations 11 minutes
Exercise: Secure a storage endpoint 10 minutes
Solution: Secure a storage endpoint 10 minutes

3 assignments Total 60 minutes

Knowledge check: Azure AD Authentication for storage 15 minutes
Knowledge check: Azure Storage and Azure Files security 15 minutes
Module quiz: Azure Storage and Azure Files 30 minutes

In this module, you will learn to configure which users and applications have access to your SQL databases. You will also learn how to block access to your servers using SQL database firewalls. You will learn how to discover, classify, and audit the use of your data. You will learn to encrypt and protect your data while is it stored in the database. You will gain an understanding about vulnerability assessments, data discovery and classification, and auditing. You will also learn to configure and lock down your SQL database on Azure to protect your corporate data while it is stored. Finally, you will learn how to secure your Azure SQL database to keep your data secure and diagnose potential security concerns as they happen.

What's included

9 videos8 readings3 assignments

9 videos Total 47 minutes

Overview of database security 6 minutes
Control who can access your database 5 minutes
Enable SQL Database authentication 6 minutes
Configure SQL Database firewalls 7 minutes
Monitor your database 5 minutes
Enable and monitor database auditing 4 minutes
Advanced data security for Azure SQL Database 6 minutes
Explore vulnerability assessment 3 minutes
Module summary 5 minutes

8 readings Total 101 minutes

Additional resources: Control who can access your database 6 minutes
Configure Azure AD authentication 10 minutes
Exercise: Configure Azure AD authentication 15 minutes
Solution: Configure Azure AD authentication 15 minutes
Auditing in practice 11 minutes
Implement data discovery and classification 9 minutes
Exercise: Secure an Azure SQL Database 30 minutes
Solution: Secure an Azure SQL Database 5 minutes

3 assignments Total 60 minutes

Knowledge check: Authentication and firewalls 15 minutes
Knowledge check: Auditing and monitoring 15 minutes
Module quiz: Database security and monitoring 30 minutes

In this module, you will gain understanding of Defender for Cloud, how it works, its basic and enhanced features, and when to use Defender for Cloud. You will learn how to use data encryption, data masking, firewalls, and auditing to protect databases from attacks. You will also learn how to secure your data in transit, at rest, and on display. You will learn to configure dynamic data masking and implement transparent data encryption. You will also learn to deploy an always encrypted implementation.