CyberCode Academy

Course 29 - AZ-500 Microsoft Azure Security Technologies | Episode 12: Mastering Data Protection and SQL Security

Listen Later
Here’s a structured summary of the lesson on Secure Data and Applications for the AZ-500 exam:Overview
  • Focuses on protecting sensitive information in Azure, covering:
    • Azure Information Protection (AIP)
    • Azure SQL security
  • Represents 30–35% of the AZ-500 exam content.
1. Azure Information Protection (AIP)
  • Cloud-based solution for classifying and protecting documents/emails.
  • Key features:
    • Labels: Can be applied manually or automatically. Examples: "Private", "Secret".
    • Protection actions: Encryption, blocking printing, or forwarding.
    • Analytics: Tracks usage through Log Analytics.
  • Hands-on lab:
    • Activate necessary licenses
    • Create classification labels
    • Configure AIP analytics
2. Azure SQL Deployment and Security Layers
  • Types of Azure SQL services:
    • Azure SQL (PaaS)
    • SQL Managed Instance
    • SQL on IaaS VMs
  • Security approached through multi-layered defense:
    • Network Security
    • Access Control
    • Threat Protection
    • Information Protection
3. SQL Network Security
  • Use Azure SQL firewall and VNet service endpoints.
  • Implements a "default deny" policy: only authorized subnets can connect.
4. SQL Access Control
  • Prefer Azure AD authentication over SQL authentication:
    • Supports MFA
    • Enables centralized auditing
  • Apply principle of least privilege:
    • Assign users to specific roles, e.g., "DB data reader"
    • Limits access to only what is necessary
5. SQL Data Protection
  • Encryption at rest: Transparent Data Encryption (TDE)
  • Encryption in transit: TLS
  • Encryption in use: Always Encrypted
  • Dynamic Data Masking (DDM):
    • Obfuscates sensitive data (e.g., email addresses) for non-privileged users
    • Data remains unchanged in the database
6. Lab Tidy-Up
  • Delete resources after exercises to minimize costs:
    • Virtual machines
    • Network interfaces
    • Disks
AZ-500 Exam Focus
  • Core skill area: Secure data and applications
  • Key points to remember:
    • Labeling and protecting documents with AIP
    • Azure SQL network and role-based access control
    • Encryption at rest, in transit, and in use
    • Dynamic Data Masking and least privilege principles


You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cybercode_academy
...more
View all episodesView all episodes
Download on the App Store
CyberCode AcademyBy CyberCode Academy