Microsoft Defender for Cloud in Azure - Mini Project: Build & Apply

Microsoft Defender for Cloud Setup and Configuration

📖 Scenario: You are a cloud administrator for a company using Microsoft Azure. Your task is to enable and configure Microsoft Defender for Cloud to protect your Azure resources from threats and vulnerabilities.

🎯 Goal: Enable Microsoft Defender for Cloud on a subscription, configure a pricing tier for a resource type, and set up an alert rule to monitor security events.

📋 What You'll Learn

Enable Microsoft Defender for Cloud on the Azure subscription

Set the pricing tier for the 'Virtual Machines' resource type to 'Standard'

Create a security alert rule to monitor for suspicious activities

💡 Why This Matters

🌍 Real World

Microsoft Defender for Cloud helps protect Azure resources by detecting threats and vulnerabilities, which is critical for maintaining cloud security.

💼 Career

Cloud administrators and security engineers use these skills to secure cloud environments and comply with organizational security policies.

1

Enable Microsoft Defender for Cloud on the subscription

Write an Azure CLI command to enable Microsoft Defender for Cloud on the subscription by setting the security pricing tier to 'Free' for all resource types. Use the command az security pricing create with --name Default and --tier Free.

Azure

# Your Azure CLI command here to enable Microsoft Defender for Cloud with Free tier

Need a hint?

Use az security pricing create to set the pricing tier for Microsoft Defender for Cloud.

2

Set the pricing tier for Virtual Machines to Standard

Write an Azure CLI command to set the Microsoft Defender for Cloud pricing tier to Standard specifically for the VirtualMachines resource type. Use az security pricing create with --name VirtualMachines and --tier Standard.

Azure

az security pricing create --name Default --tier Free
# Your Azure CLI command here to set VirtualMachines pricing tier to Standard

Need a hint?

Use the same az security pricing create command but specify --name VirtualMachines and --tier Standard.

3

Create a security alert rule for suspicious activities

Write an Azure CLI command to create a security alert rule named SuspiciousActivityAlert in Microsoft Defender for Cloud. Use az security alert create with --name SuspiciousActivityAlert and --enabled true.

Azure

az security pricing create --name Default --tier Free
az security pricing create --name VirtualMachines --tier Standard
# Your Azure CLI command here to create SuspiciousActivityAlert

Need a hint?

Use az security alert create to create the alert rule and enable it.

4

Verify Microsoft Defender for Cloud configuration

Write an Azure CLI command to list all Microsoft Defender for Cloud pricing tiers to verify your configuration. Use az security pricing list.

Azure

az security pricing create --name Default --tier Free
az security pricing create --name VirtualMachines --tier Standard
az security alert create --name SuspiciousActivityAlert --enabled true
# Your Azure CLI command here to list all pricing tiers

Need a hint?

Use az security pricing list to see all pricing tiers configured.