AZ-500: Microsoft Azure Security Engineer Associate

1. Introductie & doelgroep

• Titel: “AZ‑500: Microsoft Azure Security Engineer – Beveilig op Enterprise-niveau”

• Doelgroep: Azure-beheerders, security engineers, cloud-architecten met praktische ervaring in Azure, identiteit, netwerk en storage

• Waarom deze training: Rolgerichte aanpak – van identity tot security operations; geleid door ex‑Microsoft MVP’s & MCT’s met exclusive praktijklab-ervaring via EducateIT.

2. Beveilig identity & toegang (15–20%)

• Azure AD / Microsoft Entra ID: gebruikers, groepen, B2B/B2C

• RBAC & private custom roles

• PIM, MFA, Conditional Access, Passwordless, SSO 

• App‑registraties, service principals, managed identities

3. Secure Networking (20–25%)

• NSG’s, ASG’s, UDR’s, Virtual Network Manager

• VNet-peering, VPN Gateway, ExpressRoute encryptie

• Firewalls, DDoS, TLS op App Services en API Management

• Private Link, Service Endpoints, ASE, SQL MI netwerkconfiguratie

4. Secure Compute, Storage & Databases (20–25%)

• VM-security: JIT, patchmanagement, endpoint protection

• Storage account beveiliging: encryptie, firewalls, private endpoints

• SQL/Managed DB: TDE, threat detection, RBAC Device Management 

5. Security Ops met Defender & Sentinel (30–35%)

• Policy & Governance: Azure Policy, Security Baselines

• Defender for Cloud: security posture management, Threat Protection

• Azure Sentinel: SIEM, alerts, playbooks, automation 

6. Examengegevens & format

• 40–60 vragen (case-studies, multiple choice, drag‑and‑drop, performancelab) 

• Duur: 100–150 min; scoreverplichting: ≥700/1000 

• Verkoopprijs: ca. €155 / $165 

• Vernieuwing gratis via assessment op Microsoft Learn P

7. Waarom EducateIT?

• MVP & MCT Experts – direct van Microsoft

• Hands-on labs: performance tasks, real-world scenarios

• Examenvoorbereiding: Mock‑examens + unieke master‑cheatsheets (899+ vragen) Device Management 

8. Trainingsopzet & structuur

Dag 1 - Identity, Networking & Compute Security - Theorie + hands-on labs: Entra ID, PIM, NSG's, firewalls, JIT VM-access, Defender for Servers

Dag 2 - Storage Security, Security Operations & Examenvoorbereiding - Labs: Storage firewall/encryptie, Defender for Cloud, Sentinel playbooks + mock-examen en tips

• Duur:  2 dagen of 4 dagdelen (live of hybride)

• Inclusief: Digitale materialen, oefenexamens, naslagbare e-learning omgeving