Bøger i IT Best Practices - Microsoft Press serien

The definitive practical guide to Microsoft Defender for Cloud covering new components and multi-cloud enhancements! Microsoft Defender for Cloud offers comprehensive tools for hardening resources, tracking security posture, protecting against attacks, and streamlining security management - all in one natively integrated toolset. Now, leading Microsoft security experts Yuri Diogenes and Tom Janetscheck help you apply its robust protection, detection, and response capabilities throughout your operations, protecting workloads running on all your cloud, hybrid, and on-premises platforms. This guide shows how to make the most of new components, enhancements, and deployment scenarios, as you address today's latest threat vectors. Sharing best practices, expert tips, and optimizations only available from Microsoft's Defender for Cloud team, the authors walk through improving everything from policies and governance to incident response and risk management. Whatever your role or experience, they'll help you address new security challenges far more effectively-and save hours, days, or even weeks. Two of Microsoft's leading cloud security experts show how to: Assess new threat landscapes, the MITRE ATT&CK framework, and the implications of ''assume-breach'' Explore Defender for Cloud architecture, use cases, and adoption considerations including multicloud with AWS and GCP Plan for effective governance, successful onboarding, and maximum value Fully visualize complex cloud estates and systematically reduce their attack surfaces Prioritize risks with Secure Score, and leverage at-scale tools to build secure cloud-native apps Establish consistent policy enforcement to avoid drift Use advanced analytics and machine learning to identify attacks based on signals from all cloud workloads Enhance security posture by integrating with the Microsoft Sentinel SIEM/SOAR, Microsoft Purview, and Microsoft Defender for Endpoint Leverage just-in-time VM access and other enhanced security capabilities  About This Book For architects, designers, implementers, SecOps professionals, developers, and security specialists working in Microsoft Azure environments For all IT professionals and decision-makers concerned with securing modern hybrid/multicloud environments, cloud-native apps, and PaaS services

Proven best practices for success with every Azure monitoring and management service For cloud environments to deliver optimal value, their monitoring and management services must be designed, deployed, and managed well. Leading cloud consultant Avinash Valiramani shows how to simplify administration, reduce downtime, control cost, solve problems faster, and prepare for any workload in any environment. Explore detailed, expert coverage of Azure Backup, Azure Site Recovery, Azure Migrate, Azure Monitor, Azure Network Watcher, Azure Portal, Azure Cloud Shell, Azure Service Health, Azure Cost Management, and more. Whatever your role in delivering effi cient, reliable cloud services, this best practice, deep dive guide will help you make the most of your Azure investment.Leading Azure consultant Avinash Valiramani shows how to:Back up on-premises, Azure-based, and other cloud workloads for short- and long-term retentionImplement simple, stable, cost-effective business continuity/disaster recovery with Azure Site RecoveryDiscover, assess, and migrate diverse workloads to Azure, VMs, web apps, databases, and moreMonitor all Azure applications, VMs, and other deployed services centrally via Azure MonitorTrack, troubleshoot, and optimize networking for IaaS resourcesCreate and manage anything from single-service solutions to complex multi-service architecturesRun Azure Cloud Shells cloud-native command line from any device, anywhereMonitor service health, workload levels, service layer resources, and availabilityAlso look for these Definitive Guides to Azure success:Microsoft Azure Compute: The Definitive GuideMicrosoft Azure Networking: The Definitive GuideMicrosoft Azure Storage: The Definitive Guide

Proven best practices for success with every Azure networking serviceFor cloud environments to operate and scale optimally, their networking services must be designed, deployed, and managed well. Now, theres a complete, best-practice guide to doing just that. Writing for everyone involved in delivering Azure workloads and services, leading cloud consultant Avinash Valiramani provides a deep dive and practical field advice for Azure Virtual Networks, Azure VPN Gateways, Azure Load Balancing, Azure Traffic Manager, Azure Firewall, Azure DNS, Azure Bastion, Azure Front Door and more. Whatever your role in delivering efficient, scalable networking services, this guide will help you make the most of your Azure investment.Leading Azure consultant Avinash Valiramani shows how to:Use Azure Virtual Networks to establish a backbone for hosting other Azure resourcesProvide HTTP/HTTPS load-balancing and routing for web servers and apps through Azure Application GatewayConnect on-premises and other public networks to Azure for secure communications using the Azure VPN Gateway serviceProvide secure load balancing to apps from internal and public networks using Azure Load Balancer servicesIntegrate Azure Firewall to centrally protect Azure resources across multiple subscriptionsAccess globally scaled, fully-managed DNS services with 100% SLA from the closest Azure DNS serversProvide optimal network routing to the closest application endpoint for public-facing applications with Azure Traffic ManagerUse Microsofts global edge network along with Azure Front Door to speed up access, harden security and enhance scalability for consuming-facing and internal web applicationsAlso look for these Definitive Guides to Azure success:Microsoft Azure Compute: The Definitive GuideMicrosoft Azure Monitoring and Management: The Definitive GuideMicrosoft Azure Storage: The Definitive Guide

In this guide, a leading Azure consultant presents a deep dive into best strategies for Azure Compute planning, design, deployment, and operation. Avinash Valiramani covers Azure VMs and Scale Sets, App Services, the Azure Service Fabric, container instances, Kubernetes Service, Azure Functions, Azure Batch, and more. For each major compute workload, Valiramani introduces proven best practices reflecting his extensive real-world experience and collaboration with the Microsoft Azure team. With his practical guidance students can make the most of their Azure investment.

Following the same approach as Microsoft PressGÇÖs widely-praised Microsoft Azure Sentinel and Microsoft Azure Security Center, the authors begin with a thoughtful overview of the network security domain and its importance in the cloud. Next, they present detailed chapters on cloud-native solutions for firewalling, DDOS, WAF, and other services, showing how cloud professionals can successfully deploy them within a best practice architecture. Next, they walk through integrating key third parties, successfully monitoring network security services, and combining all components in a cohesive, GÇ£wholisticGÇ¥ network security strategy that can serve as the basis for security and compliance for years to come. No matter how large, small, simple, or complex your Azure environment is, Microsoft Azure Network Security will help you protect what matters most.

Whether you are an IT administrator, developer, or architect, cloud technologies are transforming your role. This guide brings together the knowledge you need to transition smoothly to Microsoft Office 365 cloud-only and hybrid environments. Microsoft MVP Ben Curry and leading cloud architect Brian Laws present specific, up-to-date guidance on administering key cloud technologies, including Microsoft Office 365, SharePoint Online, Azure AD, and OneDrive for Business. Microsoft cloud technology experts Ben Curry and Brian Laws show you how to: Anticipate and respond to the ways cloud technologies change your responsibilities, such as scripting key management tasks via Windows PowerShell Understand todayGÇÖs new mix of essential GÇ£Cloud ProGÇ¥ skills related to infrastructure, scripting, security, and networking Master modern cloud administration for Office 365 cloud and hybrid environments to deliver content and services, any time, on any device, from anywhere, and across organisational boundaries Administer and configure SharePoint Online, including services, site collections, and hybrid features Help secure client devices via Mobile Device Management for Office 365 Centrally manage user profiles, groups, apps, and social features Bridge Office 365 and on-premises environments to share identities and data Enforce governance, security, and compliance

Implement maximum control, security, and compliance processes in Azure cloud environments In Microsoft Azure Security Infrastructure, three leading experts show how to plan, deploy, and operate Microsoft Azure with outstanding levels of control, security, and compliance. YouGÇÖll learn how to prepare infrastructure with MicrosoftGÇÖs integrated tools, prebuilt templates, and managed servicesGÇôand use these to help safely build and manage any enterprise, mobile, web, or Internet of Things (IoT) system. The authors guide you through enforcing, managing, and verifying robust security at physical, network, host, application, and data layers. YouGÇÖll learn best practices for security-aware deployment, operational management, threat mitigation, and continuous improvementGÇôso you can help protect all your data, make services resilient to attack, and stay in control no matter how your cloud systems evolve. Three Microsoft Azure experts show you how to: Understand cloud security boundaries and responsibilities Plan for compliance, risk management, identity/access management, operational security, and endpoint and data protection Explore AzureGÇÖs defense-in-depth security architecture Use Azure network security patterns and best practices Help safeguard data via encryption, storage redundancy, rights management, database security, and storage security Help protect virtual machines with Microsoft Antimalware for Azure Cloud Services and Virtual Machines Use the Microsoft Azure Key Vault service to help secure cryptographic keys and other confidential information Monitor and help protect Azure and on-premises resources with Azure Security Center and Operations Management Suite Effectively model threats and plan protection for IoT systems Use Azure security tools for operations, incident response, and forensic investigation