AZ-300: Microsoft Azure Architect Technologies Study Group

Implement authentication and secure data (5-10%)

Implement authentication

• implement authentication by using certificates, forms-based authentication, tokens, or Windows-integrated authentication
  • What is Azure Active Directory authentication?
  • Authentication and authorization in Azure App Service
  • Get started with certificate-based authentication in Azure Active Directory
  • Windows Authentication and Azure Multi-Factor Authentication Server
  • Advanced certificate signing options in the SAML token for gallery apps in Azure Active Directory
• implement multi-factor authentication by using Azure AD
  • How it works: Azure Multi-Factor Authentication
• implement OAuth2 authentication
  • Application types for Microsoft identity platform
  • Understanding the OAuth2 implicit grant flow in Azure Active Directory (AD)
• implement Managed Identities for Azure resources Service Principal authentication
  • What are managed identities for Azure resources?
  • Use a Windows VM system-assigned managed identity to access Resource Manager
  • Use a Linux VM system-assigned managed identity to access Azure Resource Manager

Implement secure data solutions

• encrypt and decrypt data at rest and in transit
  • Azure Data Encryption-at-Rest
  • How Does Azure Encrypt Data?
• encrypt data with Always Encrypted
  • Transparent data encryption or always encrypted?
  • Always Encrypted: Protect sensitive data and store encryption keys in the Windows certificate store
  • Always Encrypted: Protect sensitive data and store encryption keys in Azure Key Vault
• implement Azure Confidential Compute
  • Azure confidential computing
  • Azure Confidential Computing updates with Mark Russinovich - Best of Microsoft Ignite 2018
• implement SSL/TLS communications
  • Azure data security and encryption best practices
  • Add an SSL certificate in Azure App Service
• create, read, update, and delete keys, secrets, and certificates by using the KeyVault API
  • What is Azure Key Vault?
  • Azure Key Vault basic concepts
  • Azure Key Vault Developer’s Guide
  • Azure Key Vault REST API reference Review each command (e.g. create, read, etc.) in the list

Back