Section 3: Security Operations

Manage Security Operations (15-20%)
Configure Security Services

Configure Microsoft Azure monitor; configure Microsoft Azure log analytics; configure diagnostic logging and log retention; configure vulnerability scanning

Configure Security Policies

Configure centralized policy management by using Microsoft Azure Security Center; configure Just In Time VM access by using Microsoft Azure Security Center

Manage Security Alerts

Create and customize alerts; review and respond to alerts and recommendations; configure a playbook for a security event by using Microsoft Azure Security Center; investigate escalated security incidents