Secure Your Data at Rest

Seize the savings! Get 40% off 3 months of Coursera Plus and full access to thousands of courses.

Secure Your Data at Rest

This course is part of Microsoft Azure Security Engineer Associate (AZ-500) Professional Certificate

Instructor: Microsoft

2,266 already enrolled

Included with

Learn more

5 modules

Gain insight into a topic and learn the fundamentals.

15 reviews

Intermediate level

Recommended experience

2 weeks to complete

at 10 hours a week

Flexible schedule

Learn at your own pace

5 modules

Gain insight into a topic and learn the fundamentals.

15 reviews

Intermediate level

Recommended experience

2 weeks to complete

at 10 hours a week

Flexible schedule

Learn at your own pace

What you'll learn

Deploy shared access signatures (SAS).
Enable and monitor database auditing.
Enable Defender for SQL for advanced threat protection.
Deploy an Always Encrypted implementation.

Skills you'll gain

Tools you'll learn

Details to know

Shareable certificate

Add to your LinkedIn profile

Assessments

14 assignments¹

AI Graded see disclaimer

Taught in English

See how employees at top companies are mastering in-demand skills

Learn more about Coursera for Business

logos of Petrobras, TATA, Danone, Capgemini, P&G and L'Oreal

Build your Cloud Computing expertise

This course is part of the Microsoft Azure Security Engineer Associate (AZ-500) Professional Certificate

When you enroll in this course, you'll also be enrolled in this Professional Certificate.

Learn new concepts from industry experts
Gain a foundational understanding of a subject or tool
Develop job-relevant skills with hands-on projects
Earn a shareable career certificate from Microsoft

There are 5 modules in this course

Secure Your Data at Rest is the fifth course in the Microsoft Azure Security Engineer Associate Professional Certificate training program. This course teaches storage security, data sovereignty, database monitoring, encryption, data masking, and using Defender for Cloud for advanced threat protection. You must secure data at rest as this will safeguard sensitive information, prevent unauthorized access, meet regulatory compliance, and ensure data confidentiality and integrity.

By the end of this course, you will be able to: - Deploy shared access signatures (SAS). - Generate SAS tokens. - Manage storage account access keys and key rollover. - Manage Azure Active Directory storage authentication. - Implement storage service encryption. - Configure blob data retention policies. - Configure Azure Files authentication. - Enable SQL database authentication with Azure Active Directory. - Monitor your database. - Enable and monitor database auditing. - Implement data discovery and classification. - Enable Defender for SQL for advanced threat protection. - Secure your data with dynamic data masking. - Implement transparent data encryption. - Deploy an Always Encrypted implementation.

In this module, you will gain an understanding about storage security and data sovereignty and how data sovereignty is achieved in Azure. You will learn how to deploy shared access signatures (SAS) and generate and test SAS tokens. You will also understand about storage access policies and how to create these policies. You will learn how to manage storage account access keys and key rollover.

What's included

11 videos9 readings4 assignments1 discussion prompt

11 videos Total 61 minutes

Course introduction 5 minutes
What is storage security? 6 minutes
Define data sovereignty 6 minutes
Overview of Azure Storage access 8 minutes
Shared access signatures 6 minutes
Deploy shared access signatures 3 minutes
What are shared keys? 3 minutes
Test key rollover 7 minutes
Overview of stored access policies 7 minutes
Create stored access policies 5 minutes
Module summary 5 minutes

9 readings Total 104 minutes

How to be successful in this course 6 minutes
Generate shared access signature tokens 10 minutes
Exercise: Generate shared access signature tokens 10 minutes
Solution: Generate shared access signature tokens 10 minutes
Manage storage account access keys 8 minutes
Exercise: Test key rollover 15 minutes
Solution: Test key rollover 5 minutes
Exercise: Create stored access policies 20 minutes
Solution: Create stored access policies 20 minutes

4 assignments Total 75 minutes

Knowledge check: Shared access signature tokens 15 minutes
Knowledge check: Shared keys 15 minutes
Knowledge check: Storage access policies 15 minutes
Module quiz: Storage security 30 minutes

1 discussion prompt Total 10 minutes

Meet and greet 10 minutes

In this module, you will learn how to configure Azure AD user account authentication for storage. You will learn how to implement storage service encryption - while the data is at rest and in transit. You will explore the difference between blobs and files. You will also learn how to configure blob data retention policies, Azure files authentication, and a storage account to accept requests from secure connections only by enabling the secure transfer required property. You will also understand how to secure a storage endpoint.

What's included

5 videos8 readings3 assignments

5 videos Total 26 minutes

Manage Azure AD storage authentication 7 minutes
Implement Azure Storage service encryption 6 minutes
Configure blob data retention policies 5 minutes
Enable the Secure transfer required property 5 minutes
Module summary 4 minutes

8 readings Total 91 minutes

Azure AD user account authentication 8 minutes
Exercise: Authenticate Azure AD user account for storage 20 minutes
Solution: Authenticate Azure AD user account for storage 20 minutes
Review the difference between blobs and files 7 minutes
Configure Azure Files authentication 5 minutes
Storage security configurations 11 minutes
Exercise: Secure a storage endpoint 10 minutes
Solution: Secure a storage endpoint 10 minutes

3 assignments Total 60 minutes

Knowledge check: Azure AD Authentication for storage 15 minutes
Knowledge check: Azure Storage and Azure Files security 15 minutes
Module quiz: Azure Storage and Azure Files 30 minutes

In this module, you will learn to configure which users and applications have access to your SQL databases. You will also learn how to block access to your servers using SQL database firewalls. You will learn how to discover, classify, and audit the use of your data. You will learn to encrypt and protect your data while is it stored in the database. You will gain an understanding about vulnerability assessments, data discovery and classification, and auditing. You will also learn to configure and lock down your SQL database on Azure to protect your corporate data while it is stored. Finally, you will learn how to secure your Azure SQL database to keep your data secure and diagnose potential security concerns as they happen.

What's included

9 videos8 readings3 assignments

9 videos Total 47 minutes

Overview of database security 6 minutes
Control who can access your database 5 minutes
Enable SQL Database authentication 6 minutes
Configure SQL Database firewalls 7 minutes
Monitor your database 5 minutes
Enable and monitor database auditing 4 minutes
Advanced data security for Azure SQL Database 6 minutes
Explore vulnerability assessment 3 minutes
Module summary 5 minutes

8 readings Total 101 minutes

Additional resources: Control who can access your database 6 minutes
Configure Azure AD authentication 10 minutes
Exercise: Configure Azure AD authentication 15 minutes
Solution: Configure Azure AD authentication 15 minutes
Auditing in practice 11 minutes
Implement data discovery and classification 9 minutes
Exercise: Secure an Azure SQL Database 30 minutes
Solution: Secure an Azure SQL Database 5 minutes

3 assignments Total 60 minutes

Knowledge check: Authentication and firewalls 15 minutes
Knowledge check: Auditing and monitoring 15 minutes
Module quiz: Database security and monitoring 30 minutes

In this module, you will gain understanding of Defender for Cloud, how it works, its basic and enhanced features, and when to use Defender for Cloud. You will learn how to use data encryption, data masking, firewalls, and auditing to protect databases from attacks. You will also learn how to secure your data in transit, at rest, and on display. You will learn to configure dynamic data masking and implement transparent data encryption. You will also learn to deploy an always encrypted implementation.

What's included

10 videos6 readings3 assignments

10 videos Total 49 minutes

What is Defender for Cloud? 5 minutes
How Defender for Cloud works 5 minutes
When to use Defender for Cloud 4 minutes
Enable Defender for SQL 5 minutes
Secure your data in transit, at rest, and on display 6 minutes
Configure dynamic data masking 3 minutes
Implement transparent data encryption 5 minutes
Deploy Always Encrypted features 5 minutes
Deploy an Always Encrypted implementation 6 minutes
Module summary 5 minutes

6 readings Total 138 minutes

Basic and enhanced features of Microsoft Defender for Cloud 8 minutes
Exercise: Enable Defender for SQL 15 minutes
Solution: Enable Defender for SQL 15 minutes
Exercise: Deploy an Always Encrypted Implementation 45 minutes
Solution: Deploy an Always Encrypted Implementation 45 minutes
Course 5 Glossary: Secure Your Data at Rest 10 minutes

3 assignments Total 60 minutes

Knowledge check: Defender for Cloud 15 minutes
Knowledge check: Data masking and encryption 15 minutes
Module quiz: Defender for Cloud and data masking and encryption 30 minutes

In this module, you will attempt a course-level ungraded project and graded assessment.

What's included

4 videos1 reading1 assignment1 peer review2 discussion prompts

4 videos Total 19 minutes

Course summary 8 minutes
About the graded assessment 5 minutes
Congratulations 2 minutes
Next steps 5 minutes

1 reading Total 3 minutes

About the course project 3 minutes

1 assignment Total 60 minutes

Graded assessment: Secure Your Data at Rest 60 minutes

1 peer review Total 30 minutes

Course project 30 minutes

2 discussion prompts Total 15 minutes

Compare your work 10 minutes
Share helpful hints 5 minutes

Earn a career certificate

Add this credential to your LinkedIn profile, resume, or CV. Share it on social media and in your performance review.

Instructor

Microsoft

287 Courses 2,323,864 learners

Offered by

Microsoft

Explore more from Cloud Computing

Status: Free Trial
LearnKartS
Cloud Data & Application Security
Course
Status: Free Trial
Packt
Securing Compute, Storage, and Databases in Azure
Course
Status: Free Trial
Coursera
Secure Data: Mask, Monitor, and Audit
Course
Status: Free Trial
Microsoft
Secure your Cloud Data
Course

Why people choose Coursera for their career

Felipe M.

Learner since 2018

"To be able to take courses at my own pace and rhythm has been an amazing experience. I can learn whenever it fits my schedule and mood."

Jennifer J.

Learner since 2020

"I directly applied the concepts and skills I learned from my courses to an exciting new project at work."

Larry W.

Learner since 2021

"When I need courses on topics that my university doesn't offer, Coursera is one of the best places to go."

Chaitanya A.

"Learning isn't just about being better at your job: it's so much more than that. Coursera allows me to learn without limits."

Open new doors with Coursera Plus

Unlimited access to 10,000+ world-class courses, hands-on projects, and job-ready certificate programs - all included in your subscription

Learn more

Advance your career with an online degree

Earn a degree from world-class universities - 100% online

Explore degrees

Join over 3,400 global companies that choose Coursera for Business

Upskill your employees to excel in the digital economy

Learn more

Frequently asked questions

To access the course materials, assignments and to earn a Certificate, you will need to purchase the Certificate experience when you enroll in a course. You can try a Free Trial instead, or apply for Financial Aid. The course may offer 'Full Course, No Certificate' instead. This option lets you see all course materials, submit required assessments, and get a final grade. This also means that you will not be able to purchase a Certificate experience.

When you enroll in the course, you get access to all of the courses in the Certificate, and you earn a certificate when you complete the work. Your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile.