Home
WSQ - Microsoft Azure Security Engineer Associate (AZ-500)

WSQ - Microsoft Azure Security Engineer Associate (AZ-500)

Embark on a journey to becoming a proficient Azure Security Engineer with our expertly designed certification prep course. This course aims to build your competencies in securing cloud infrastructure, thus ensuring that you stand out in the competitive IT job market. Gain deep insights into Azure's security controls and capabilities, preparing you to safeguard organizations against potential threats and vulnerabilities. The curriculum is curated to cover vital aspects like identity and access management, securing data within Azure platforms, and implementing security controls.

Further, this course prepares you to excel in the Microsoft Azure Security Engineer Associate Certification, emphasizing practical skills and real-world problem-solving approaches. As you navigate through the course, you'll grasp the nuances of configuring Azure Active Directory, securing virtual networks, and implementing resource management security strategies. The learning outcomes are structured to equip you with the acumen to design and execute secure solutions on the Microsoft Azure platform, thus paving a pathway for a successful and promising career in cloud security.

Learning Outcomes

By end of the course, learners should be able to:

Administer Azure security programmes and analyze the impact of system updates.
Perform Azure system administration and configure network device security features.
Perform troubleshooting of Azure security software and assist users in defining access rights.
Coordinate Azure access control rights and investigate unauthorized access incidents.

Course Brochure

Download WSQ - Microsoft Azure Security Engineer Associate Certification Prep (AZ-500) Brochure

Skills Framework

This course follows the guideline of Security Administration ICT-OUS-3012-1.1 under ICT Skills Framework

Certification

Certificate of Completion from Tertiary Infotech - Upon meeting at least 75% attendance and passing the assessment(s), participants will receive a Certificate of Completion from Tertiary Infotech.
OpenCerts from SkillsFuture Singapore - After passing the assessment(s) and achieving at least 75% attendance, participants will receive a OpenCert (aka Statement of Achievement) from SkillsFuture Singapore, certifying that they have achieved the Competency Standard(s) in the above Skills Framework.
External Certification - The participant will be able to attempt the Microsoft Azure Security Engineer Associate (AZ500) exam after attending this course. Upon passing the exam, you will receive the Microsoft Azure Security Engineer Associate (AZ500) accreditation.

Microsoft Learning Partner

We are Authorised Microsoft Learning Partner (Org ID: 5238476). To get the official Microsoft certification, please register your certification exam at Pearson Vue Test Center.

Certification Exam at Pearson Vue

We are Authorised Pearson Vue Testing Center. Once you have prepared for the exam, you can register for the certification here. The course fee does not include the certification exam fee.

You can purchase the exam voucher (one of the lowest prices in Singapore) at Microsoft Role-Based Certification Exam Voucher.

WSQ Funding

WSQ funding is only applicable to Singaporeans and PR. Subject to eligibility, the funding support is subjected to funding caps.

Effective for courses starting from 1 Jan 2024
Full Fee	GST	Nett Fee after Funding (Incl. GST)
		Baseline	MCES / SME
$2,000	$180.00	$1,180.00	$780.00

Baseline: Singaporean/PR age 21 and above
MCES(Mid-Career Enhanced Subsidy): S'porean age 40 & above

Upon registration, we will advise further on how to tap on the WSQ Training Subsidy.

You can pay the nett fee (after the WSQ training subsidy) by the following :

SkillsFuture Enterprise Credit (SFEC)

Eligible Singapore-registered companies can tap on $10000 SFEC to cover out-of-pocket expenses.Click here to submit SkillsFuture Enterprise Credit

SkillsFuture Credit (SFC)

Eligible Singapore Citizens can use their SFC to offset course fee payable after funding but the $4,000 Additional SFC (Mid-Career Support) cannot be used. Click here for SkillsFuture Credit submission

UTAP

Eligible NTUC members can apply for 50% of the unfunded fee from UTAP, capped up to $250/year and for members aged 40 and above, capped up to $500/year. Click here to submit UTAP

PSEA

Eligible Singapore Citizens can use their PSEA funds to offset course fee payable after funding.

To check for Post-Secondary Education Account (PSEA) eligibility for this course, Visit SkillsFuture (course code: TGS-2023039344)

Scroll down to “Keyword Tags” to verify for PSEA eligibility.
If there is “PSEA” under keyword tags, the course is eligible for PSEA.

Course Code: TGS-2023039344

Post-Course Support

We provide free consultation related to the subject matter after the course. Please email your queries to enquiry@tertiaryinfotech.com and we will forward your queries to the subject matter experts and get back to you asap.

Course Cancellation/Reschedule Policy

We reserve the right to cancel or re-schedule the course due to unforeseen circumstances. If the course is cancelled, we will refund 100% to participants.
Note the venue of the training is subject to changes due to class size and availability of the classroom.
Note the minimal class size to start a class is 3 Pax.

Course Details

Topic 1: Secure Azure solutions with Azure Active Directory

Explore Azure Active Directory features
Self-managed Active Directory Domain Services, Azure Active Directory, and managed Azure Active Directory Domain Services
Azure AD DS and self-managed AD DS
Azure AD DS and Azure AD
Investigate roles in Azure AD
Azure AD built-in roles
Deploy Azure AD Domain Services
Create and manage Azure AD users
Manage users with Azure AD groups
Configure Azure AD administrative units
Implement passwordless authentication

Topic 2: Implement Hybrid identity

Deploy Azure AD connect
Explore authentication options
Configure Password Hash Synchronization (PHS)
Implement Pass-through Authentication (PTA)
Deploy Federation with Azure AD
Explore the authentication decision tree
Configure password writeback

Topic 3: Deploy Azure AD identity protection

Explore Azure AD identity protection
Configure risk event detections
Implement user risk policy
Implement sign-in risk policy
Deploy multifactor authentication in Azure
Explore multifactor authentication settings
Enable multifactor authentication
Implement Azure AD conditional access
Configure conditional access conditions
Implement access reviews

Topic 4: Configure Azure AD privileged identity management

Explore the zero trust model
Review the evolution of identity management
Deploy Azure AD privileged identity management
Configure privileged identity management scope
Implement privileged identity management onboarding
Explore privileged identity management configuration settings
Implement a privileged identity management workflow

Topci 5: Design an enterprise governance strategy

Review the shared responsibility model
Explore the Azure cloud security advantages
Review Azure hierarchy of systems
Configure Azure policies
Enable Azure role-based access control (RBAC)
Compare and contrast Azure RBAC vs Azure policies
Configure built-in roles
Enable resource locks
Deploy Azure blueprints
Design an Azure subscription management plan

Topic 6: Implement perimeter security

Define defense in depth
Explore virtual network security
Enable Distributed Denial of Service (DDoS) Protection
Configure a distributed denial of service protection implementation
Explore Azure Firewall features
Deploy an Azure Firewall implementation
Configure VPN forced tunneling
Create User Defined Routes and Network Virtual Appliances
Explore hub and spoke topology

Topic 7: Configure network security

Explore Network Security Groups (NSG)
Deploy a Network Security Groups implementation
Create Application Security Groups
Enable service endpoints
Configure service endpoint services
Deploy private links
Implement an Azure application gateway
Deploy a web application firewall
Configure and manage Azure front door

Topic 8: Configure and manage host security

Enable endpoint protection
Define a privileged access device strategy
Deploy privileged access workstations
Create virtual machine templates
Enable and secure remote access management
Configure update management
Deploy disk encryption
Managed disk encryption options
Deploy and configure Windows Defender
Microsoft cloud security benchmark in Defender for Cloud
Explore Microsoft Defender for Cloud recommendations

Topic 9: Enable Containers security

Explore containers
Configure Azure Container Instances security
Manage security for Azure Container Instances (ACI)
Explore the Azure Container Registry (ACR)
Enable Azure Container Registry authentication
Review Azure Kubernetes Service (AKS)
Implement an Azure Kubernetes Service architecture
Configure Azure Kubernetes Service networking
Deploy Azure Kubernetes Service storage
Secure authentication to Azure Kubernetes Service with Active Directory
Manage access to Azure Kubernetes Service using Azure role-based access controls

Topic 10: Deploy and secure Azure Key Vault

Explore Azure Key Vault
Configure Key Vault access
Review a secure Key Vault example
Deploy and manage Key Vault certificates
Create Key Vault keys
Manage customer managed keys
Enable Key Vault secrets
Configure key rotation
Manage Key Vault safety and recovery features
Perform Try-This exercises
Explore the Azure Hardware Security Module

Topic 11: Configure application security features

Review the Microsoft identity platform
Explore the Application model
Register an application with App Registration
Configure Microsoft Graph permissions
Enable managed identities
Azure App Services
App Service Environment
Azure App Service plan
App Service Environment networking
Availability Zone Support for App Service Environments
App Service Environment Certificates

Topic 12: Implement storage security

Define data sovereignty
Configure Azure storage access
Deploy shared access signatures
Manage Azure AD storage authentication
Implement storage service encryption
Configure blob data retention policies
Configure Azure files authentication
Enable the secure transfer required property

Topic 13: Configure and manage SQL database security

Enable SQL database authentication
Configure SQL database firewalls
Enable and monitor database auditing
Implement data discovery and classification
Microsoft Defender for SQL
Vulnerability assessment for SQL Server
SQL Advanced Threat Protection
Explore detection of a suspicious event
SQL vulnerability assessment express and classic configurations
Configure dynamic data masking
Implement transparent data encryption
Deploy always encrypted features
Deploy an always encrypted implementation

Topic 14: Configure and manage Azure Monitor

Explore Azure Monitor
Configure and monitor metrics and logs
Enable Log Analytics
Manage connected sources for log analytics
Enable Azure monitor Alerts
Configure properties for diagnostic logging

Topic 15: Enable and manage Microsoft Defender for Cloud

MITRE Attack matrix
Implement Microsoft Defender for Cloud
Security posture
Workload protections
Deploy Microsoft Defender for Cloud
Azure Arc
Azure Arc capabilities
Microsoft cloud security benchmark
Configure Microsoft Defender for Cloud security policies
View and edit security policies
Manage and implement Microsoft Defender for Cloud recommendations
Explore secure score
Define brute force attacks
Understand just-in-time VM access
Implement just-in-time VM access

Topic 16: Configure and monitor Microsoft Sentinel

Enable Microsoft Sentinel
Configure data connections to Sentinel
Create workbooks to monitor Sentinel data
Enable rules to create incidents
Configure playbooks
Hunt and investigate potential breaches

Final Assessment

Written Assessment - Short Answer Questions (WA-SAQ)
Practical Performance (PP)

Course Info

Promotion Code

Promo or discount cannot be applied to WSQ courses

Minimum Entry Requirement

Knowledge and Skills

Able to operate using computer functions with minimum Computer Literacy Level 2 based on ICAS Computer Skills Assessment Framework
Minimum 3 GCE ‘O’ Levels Passes including English or WPL Level 5 (Average of Reading, Listening, Speaking & Writing Scores)

Attitude

Positive Learning Attitude
Enthusiastic Learner

Experience

Minimum of 1 year of working experience.

Target Year Group : 21-65 years old

Minimum Software/Hardware Requirement

Software:

You need to sign up a Azure account (Credit Card is required).

Hardware: Windows and Mac Laptops

About Progressive Wage Model (PWM)

The Progressive Wage Model (PWM) helps to increase wages of workers through upgrading skills and improving productivity.

Employers must ensure that their Singapore citizen and PR workers meet the PWM training requirements of attaining at least 1 Workforce Skills Qualification (WSQ) Statement of Attainment, out of the list of approved WSQ training modules.

For more information on PWM, please visit MOM site.

Funding Eligility Criteria

Individual Sponsored Trainee

Employer Sponsored Trainee

Singapore Citizens or Singapore Permanent Residents
From 1 October 2023, attendance-taking for SkillsFuture Singapore's (SSG) funded courses must be done digitally via the Singpass App. This applies to both physical and synchronous e-learning courses.
Trainee must pass all prescribed tests / assessments and attain 100% competency.
We reserves the right to claw back the funded amount from trainee if he/she did not meet the eligibility criteria.

Singapore Citizens or Singapore Permanent Residents who are DIRECT EMPLOYEE of the sponsoring company.
From 1 October 2023, attendance-taking for SkillsFuture Singapore's (SSG) funded courses must be done digitally via the Singpass App. This applies to both physical and synchronous e-learning courses.
Trainee must pass all prescribed tests / assessments and attain 100% competency.
We reserves the right to claw back the funded amount from the employer if trainee did not meet the eligibility criteria.

SkillsFuture Credit:

Eligible Singapore Citizens can use their SkillsFuture Credit to offset course fee payable after funding.

PSEA:

To check for Post-Secondary Education Account (PSEA) eligibility, goto mySkillsFuture portal and search for this course code.
Scroll down to "Keyword Tags" to verify for PSEA eligibility.
If there is “PSEA” under keyword tags, the course is eligible for PSEA.
And if there is no “PSEA” under keyword tags, the course is ineligible for PSEA.
Not all courses are eligible for PSEA funding.

Absentee Payroll (AP) Funding:

$4.50 per hour, capped at $100,000 per enterprise per calendar year.
AP funding will be computed based on the actual number of training hours attended by the trainee.

SFEC:

If the Training Provider has submitted an enrolment for course fee grant claim in Training Partners Gateway (TPGateway), SSG would be able to derive SFEC funding based on this record. There is no need for enterprise to submit any claim request and the SFEC claim will be automatically generated and disbursed.
Where there is no such record, eligible employers are required to submit an SFEC claim after course completion via the SFEC microsite.
SkillsFuture Enterprise Credit (SFEC) Microsite

Steps to Apply Skills Future Claim

The staff will send you an invoice with the fee breakdown.
Login to the MySkillsFuture portal, select the course you’re enrolling on and enter the course date and schedule.
Enter the course fee payable by you (including GST) and enter the amount of credit to claim.
Upload your invoice and click ‘Submit’

SkillsFuture Level-Up Program

The SkillsFuture Level-Up Programme provides greater structural support for mid-career Singaporeans aged 40 years and above to pursue a substantive skills reboot and stay relevant in a changing economy. For more information, visit SkillsFuture Level-Up Programme

Get Additional Course Fee Support Up to $500 under UTAP

The Union Training Assistance Programme (UTAP) is a training benefit provided to NTUC Union Members with an objective of encouraging them to upgrade with skills training. It is provided to minimize the training cost. If you are a NTUC Union Member then you can get 50% funding (capped at $500 per year) under Union Training Assistance Programme (UTAP).

For more information visit NTUC U Portal – Union Training Assistance Program (UTAP)

Steps to Apply UTAP

Note

SSG subsidy is available for Singapore Citizens, Permanent Residents, and Corporates.
All Singaporeans aged 25 and above can use their SkillsFuture Credit to pay. For more details, visit www.skillsfuture.gov.sg/credit
An unfunded course fee can be claimed via SkillsFuture Credit or paid in cash.
UTAP funding for NTUC Union Members is capped at $250 for 39 years and below and at $500 for 40 years and above.
UTAP support amount will be paid to training provider first and claimed after end of class by learner.

Job Roles

Security Engineer
Cloud Security Analyst
Systems Administrator
Network Administrator
IT Security Specialist
DevOps Engineer
Solutions Architect
Security Consultant
Cybersecurity Analyst
Infrastructure Architect
IT Manager
Cloud Solutions Architect
Security Compliance Analyst
Security Auditor
Incident Responder

Trainers

Sanjiv Venkatram: Sanjiv i is an ACTA certified experienced leader with a proven track record in business / finance consulting and in developing i) business intelligence (BI) solutions ii) data analytics/analysis solutions and iii) IOT lead BI solutions. Sanjiv's goal through Prudentia Consulting, is to promote the simple joy and excitement of actively using the Microsoft Platform. He believes that the agility afforded by the Microsoft platform helps businesses get time back for deeper business thinking and to spend more time with their end customers

Sanjiv has rich experiences in diverse/complex high-tech businesses, turn around environments and strategic transformations. His functional expertise is in sales analytics, financial planning and analysis, engineering and program management. He has worked across discrete manufacturing, professional services and higher education verticals. He also has a working knowledge of equities portfolio management within the financial services domain.Sanjiv is the CEO of Prudentia Consulting, an organization committed to promoting the active usage of the Microsoft Platform. Prior to this, he has worked at Microsoft (US & APAC: 9.2 years), Cognizant Tech Solutions (3.3 years), Yazaki North America (8 years) and until recently at Oracle. Here are a few of his BI/analytics projects driven at scale: Built APAC wide BI dashboard using the Power BI umbrella tool set (Power BI online, Power BI desktop and Power Pivot) and a KPI lake (SQL DB), Helped develop key KPIs – identified key KPIs and helped land this in the DB, Developed a budget audit tool that captured budget inputs from a host of countries across the globe, Developed a business unit P&L reporting tool (functional architecture) in Business Objects for the world-wide financial planning and analysis team.

Alec Tan: Alec Tan is a ACTA certified trainer, He has a number of Comptia certifications. Since 2002, starting off from IT technical background to pre-sales, sales account manager, system integration, operate IT retail / repair shop business in Sim Lim Square 2008 ~ 2012, and back to IT industry employment, freelance IT Trainer till present.

Kishan Raaj: Kishan Raaj is a seasoned Data Science and SAP Program Manager with over 15 years of experience, currently leading all end-to-end training and projects for Data Science across Asia at LITHAN, Singapore. With expertise in machine learning, data analytics, and cloud technologies, he is well-versed in techniques such as regression, decision trees, clustering, and text mining. He has hands-on experience with tools like Python, R, Tableau, PowerBI, and Microsoft Azure Machine Learning Studio.
As an ACTA certified trainer, Kishan has designed and delivered comprehensive courses for SAP and Data Science programs, managing teams and training in multiple countries, including Singapore, Malaysia, China, India, and Vietnam. His background in SAP, particularly in S4/HANA and ABAP, combined with his expertise in machine learning libraries such as TensorFlow and Keras, positions him as a highly capable leader in technical education and project management across various industries.

Quah Chee Yong: Quah Chee Yong is a ACTA certified trainer. Quah Chee Yong Chee Yong is an experienced professional who has held various Technical, Operations and Commercial positions across several industriesA firm believer that AI can create a better world, he has equipped himself with the Knowledge and Skills in the fields of Data Science, Machine Learning, Deep Learning and Cloud Deployment

He has a deep passion for training & facilitating and is currently a Singapore WSQ certified Adult Educator. He particularly enjoys the interactive engagements with his fellow trainers and learners

Agus Salim is a professional with more than 10 years of experience in Project Management, IT Solutions Management, and Systems Integration both in waterfall and agile methodology. He started out his career as a Web Developer before moving on to Business Analyst/Project Manager. He has strong leadership and the capability of leading a team with a proven ability to deliver projects with tight timelines. Besides his experiences in managing projects, he has good knowledge in Cybersecurity and hands-on experience in Next Generation Firewall such as Check Point. During his free time, he likes to explore Cloud Technology, especially on Microsoft Azure. Agus has obtained AZ-104, AZ-500 and other Microsoft certifications. I am also a ALCP certified trainer.