Blueprint 4 Nhóm Kỹ Năng AZ-500
Phân bổ tỷ trọng chính thức theo Microsoft Learn Study Guide 2026 — dùng để ưu tiên ôn tập đúng chỗ.
Chương 01–04 — Entra ID, MFA, Conditional Access, RBAC, PIM, Managed Identity
Chương 05–07 — NSG, UDR, Azure Firewall, Application Gateway, WAF, Private Endpoint
Chương 08–10 — Bastion, JIT, AKS, Storage, Key Vault, Azure SQL, Azure Policy
Chương 11–12 — Defender for Cloud, Secure Score, Regulatory Compliance, Sentinel, KQL, Incident Response
12 Chương AZ-500
Microsoft Entra ID Security Foundation
Tenant, domain, user, group, dynamic group, Administrative Unit, Password Protection, SSPR. Nền tảng danh tính cho toàn khóa AZ-500.
MFA, Authentication Methods & Conditional Access
MFA, Conditional Access policy, Named Locations, block legacy authentication, device compliance, Report-only mode, What If tool.
RBAC, Custom Roles & Privileged Identity Management
Azure RBAC, Entra roles, custom role theo JSON, PIM eligible assignment, approval workflow, Access Review.
Enterprise Apps, App Registration & Managed Identity
Enterprise applications, App Registration, OAuth permission grants, admin consent, system-assigned & user-assigned managed identity.
Secure Virtual Networks
NSG, Application Security Group, User Defined Route, VNet Peering, Network Watcher, NSG Flow Logs, Traffic Analytics.
Azure Firewall, Application Gateway & WAF
Azure Firewall Standard/Premium, DNAT rule, Firewall Policy, Threat Intelligence, Application Gateway, WAF policy OWASP, Azure Front Door.
Private Access Security
Service Endpoint, Private Endpoint, Private Link Service, Private DNS Zone, App Service network integration, VNet Integration.
Secure Compute, Containers & App Services
Azure Bastion, JIT VM Access, Encryption at Host, AKS security, ACR, ACI, App Service authentication, API Management.
Storage, Key Vault & Data Protection
Storage firewall, User Delegation SAS, Soft Delete, Immutable Blob, Key Vault secrets/keys/certificates, private endpoint, RBAC, key rotation.
Azure SQL Security, Backup & Governance
Azure SQL Entra auth, TDE, Auditing, Dynamic Data Masking, Always Encrypted, Azure Policy, Resource Locks, Recovery Services Vault.
Microsoft Defender for Cloud
CSPM, Secure Score, Regulatory Compliance, Defender plans (Servers, Storage, Containers), Vulnerability Assessment, DevOps Security.
Microsoft Sentinel, KQL & Security Operations
SIEM/SOAR, Data Connectors, KQL cơ bản, Analytics Rules, Incident Investigation, Automation Rule & Playbook.
Thư Viện Lab AZ-500 — 50 Bài Thực Hành
50 bài lab từng bước — từ cấu hình Entra ID đến Sentinel KQL. Bao phủ toàn bộ 4 nhóm kỹ năng AZ-500. Mỗi lab có mục tiêu rõ ràng, hướng dẫn chi tiết, kết quả đầu ra kiểm chứng được.
Tài Liệu Tham Khảo
Trang chứng chỉ chính thức, thông tin thi, sandbox labs miễn phí từ Microsoft.
Danh sách kỹ năng được kiểm tra chính thức — blueprint quan trọng nhất khi ôn thi.
Tài liệu kỹ thuật chính thức toàn bộ dịch vụ bảo mật Azure — tham chiếu trong lab.
Tài liệu Microsoft Sentinel — SIEM/SOAR, KQL queries, Analytics Rules, Playbooks.