Azure Security Engineer Study Roadmap

Identity: Microsoft Entra ID, authentication methods, MFA, passwordless

Identity: Conditional Access, PIM, identity protection, app registrations

Identity: Managed identities, service principals, Azure AD B2B/B2C

Networking: NSGs, ASGs, Azure Firewall, firewall policies

Networking: VPN Gateway, ExpressRoute, DDoS Protection, Private Link

Networking: Web Application Firewall, Front Door, network segmentation

Compute: VM security, disk encryption, container security, AKS hardening

Storage: Storage encryption, Key Vault, SAS tokens, access policies

Storage: SQL/Cosmos DB security, Microsoft Purview, data classification

Security Ops: Microsoft Defender for Cloud, Secure Score, recommendations

Security Ops: Microsoft Sentinel, KQL queries, workbooks, playbooks

Full Review: Practice exams, hands-on labs, weak area focus