Microsoft Azure Expert for Demonstration Creation
Budget: $10 – $30 USD
We are looking for a highly skilled Microsoft Azure professional to create 126 hands-on demonstrations.
Each demo must follow a structured format, including:
1️⃣ Objective – Clearly define what the demo covers and why it matters.
2️⃣ Step-by-Step Guide – Show the entire configuration process in Azure (with screen recordings).
3️⃣ Outcome – Explain the expected result and real-world application.
Requirements:
✅ Deep expertise in Microsoft Azure (AZ-104 Certified Preferred)
✅ Hands-on experience in Azure portal, CLI, PowerShell, Microsoft Entra ID, Intune, Defender, and networking
✅ Strong ability to explain concepts clearly in a step-by-step manner
✅ High-quality screen recordings of all demos (NO background noise or distractions)
✅ Professional voiceover explaining each step concisely
✅ All rights to the demos, including videos and scripts, will remain with us
The freelancer must deliver structured, easy-to-follow hands-on labs that match real-world Azure administration scenarios.
Deliverables:
? 126 Hands-on Labs & Demos covering that are mentioned in the word document
? Recorded Video in 4K or 3840*2160, Ensure no personal details or information sharing in any of the demo.
? ?️ 126 Hands-on Demos (Each With Structured Format)
Each demo must follow this structure:
1️⃣ Objective – What this demo will accomplish (clear, focused goal).
2️⃣ Step-by-Step Guide – Detailed walkthrough with screen recordings.
3️⃣ Voiceover – Clear, professional explanation of each step.
4️⃣ Outcome – What learners will gain after completing the demo.
Recording & Video Quality Requirements:
? High-quality screen recordings (4k 3840*2160)
? Screen text zoom set to 125% for better visibility
? Clear, professional English voiceover
? Well-structured documentation (scripts & steps)
A sample demo details from 126 demos follows as below
Demo: Configuring Zero Trust Conditional Access in Microsoft Entra ID
Objective:
The objective of this demo is to implement Zero Trust Conditional Access in Microsoft Entra ID, ensuring that access to cloud applications is verified at every stage based on user risk, device health, and session context. This configuration:
• Enforces Multi-Factor Authentication (MFA) for high-risk sign-ins.
• Restricts access to only compliant, managed devices.
• Blocks access from untrusted locations and risky IPs.
• Implements session control policies for continuous authentication.
This setup ensures that access is always evaluated dynamically, reducing unauthorized access risks.
________________________________________
Step-by-Step Guide:
Step 1: Access Conditional Access Policies in Microsoft Entra ID
1. Sign in to the Microsoft Entra ID Admin Center.
o URL: https://entra.microsoft.com
2. Navigate to Protection → Conditional Access.
3. Click + New policy → Create a new policy.
4. Enter a name (e.g., "Zero Trust Access Policy").
________________________________________
Step 2: Define Users and Groups for Policy Enforcement
1. In Assignments, click Users → Include → Select Users and Groups.
2. Select All Users or specify a security group (e.g., High-Risk Users).
3. (Optional) Click Exclude and select Break Glass Admin Accounts to prevent accidental lockout.
To list security groups via PowerShell, run:
Get-AzureADGroup -All $true | Select DisplayName, ObjectId
________________________________________
Step 3: Define Applications and Access Scope
1. Click Cloud apps or actions → Select apps.
2. Choose critical applications (e.g., Microsoft 365, Exchange Online, Azure Management).
3. (Optional) Select All cloud apps to enforce broad Zero Trust access control.
To retrieve registered enterprise apps, run:
Get-AzureADServicePrincipal | Select DisplayName, AppId
________________________________________
Step 4: Configure Zero Trust Conditions
1. Sign-in Risk Conditions:
o Go to Conditions → Sign-in Risk → Set Medium & High risk → Apply policy.
o This enforces MFA for risky sign-ins (e.g., sign-ins from leaked credentials).
2. Device Compliance Conditions:
o Go to Conditions → Device Platforms → Select Windows, macOS, iOS, Android.
o Enable Require compliant device to enforce managed device access.
3. Location-Based Restrictions:
o Go to Conditions → Locations → Exclude trusted IPs (e.g., corporate network).
o Block access from high-risk locations (e.g., anonymous VPNs, Tor exit nodes).
4. Session Controls for Continuous Access Evaluation:
o Go to Session → Enable Continuous Access Evaluation (CAE).
o This forces session validation every time risk changes.
________________________________________
Step 5: Define Access Control Actions
1. Click Access Controls → Grant.
2. Select:
o Require Multi-Factor Authentication (MFA).
o Require device to be compliant (managed via Intune).
o Require Hybrid Azure AD join (for domain-joined devices).
3. Click Select → Enable Policy → Create.
To apply MFA enforcement using PowerShell, run:
New-AzureADMSConditionalAccessPolicy -DisplayName "Zero Trust MFA Policy" -State "Enabled" -GrantControls @{BuiltInControls="Mfa"}
________________________________________
Step 6: Test and Monitor Policy Enforcement
1. Go to Sign-in logs → Conditional Access → View policy results.
2. Simulate a login attempt from a non-compliant device and ensure access is blocked.
3. Test sign-ins from a risky location and validate MFA prompts.
To check policy enforcement for a specific user, run:
Get-AzureADAuditSignInLogs -Filter "UserPrincipalName eq 'user at domain.com'" | Select ConditionalAccessStatus, AuthenticationRequirement
________________________________________
Outcome:
By configuring Zero Trust Conditional Access, organizations:
• Ensure real-time identity verification using MFA, device health, and location context.
• Block unauthorized access from high-risk sign-ins and untrusted devices.
• Protect cloud resources by dynamically enforcing session controls.
• Reduce security breaches through continuous access evaluation.
This approach strengthens identity security by applying adaptive, risk-based access controls, aligning with Zero Trust principles in Microsoft Entra ID.
Each demo must follow a structured format, including:
1️⃣ Objective – Clearly define what the demo covers and why it matters.
2️⃣ Step-by-Step Guide – Show the entire configuration process in Azure (with screen recordings).
3️⃣ Outcome – Explain the expected result and real-world application.
Requirements:
✅ Deep expertise in Microsoft Azure (AZ-104 Certified Preferred)
✅ Hands-on experience in Azure portal, CLI, PowerShell, Microsoft Entra ID, Intune, Defender, and networking
✅ Strong ability to explain concepts clearly in a step-by-step manner
✅ High-quality screen recordings of all demos (NO background noise or distractions)
✅ Professional voiceover explaining each step concisely
✅ All rights to the demos, including videos and scripts, will remain with us
The freelancer must deliver structured, easy-to-follow hands-on labs that match real-world Azure administration scenarios.
Deliverables:
? 126 Hands-on Labs & Demos covering that are mentioned in the word document
? Recorded Video in 4K or 3840*2160, Ensure no personal details or information sharing in any of the demo.
? ?️ 126 Hands-on Demos (Each With Structured Format)
Each demo must follow this structure:
1️⃣ Objective – What this demo will accomplish (clear, focused goal).
2️⃣ Step-by-Step Guide – Detailed walkthrough with screen recordings.
3️⃣ Voiceover – Clear, professional explanation of each step.
4️⃣ Outcome – What learners will gain after completing the demo.
Recording & Video Quality Requirements:
? High-quality screen recordings (4k 3840*2160)
? Screen text zoom set to 125% for better visibility
? Clear, professional English voiceover
? Well-structured documentation (scripts & steps)
A sample demo details from 126 demos follows as below
Demo: Configuring Zero Trust Conditional Access in Microsoft Entra ID
Objective:
The objective of this demo is to implement Zero Trust Conditional Access in Microsoft Entra ID, ensuring that access to cloud applications is verified at every stage based on user risk, device health, and session context. This configuration:
• Enforces Multi-Factor Authentication (MFA) for high-risk sign-ins.
• Restricts access to only compliant, managed devices.
• Blocks access from untrusted locations and risky IPs.
• Implements session control policies for continuous authentication.
This setup ensures that access is always evaluated dynamically, reducing unauthorized access risks.
________________________________________
Step-by-Step Guide:
Step 1: Access Conditional Access Policies in Microsoft Entra ID
1. Sign in to the Microsoft Entra ID Admin Center.
o URL: https://entra.microsoft.com
2. Navigate to Protection → Conditional Access.
3. Click + New policy → Create a new policy.
4. Enter a name (e.g., "Zero Trust Access Policy").
________________________________________
Step 2: Define Users and Groups for Policy Enforcement
1. In Assignments, click Users → Include → Select Users and Groups.
2. Select All Users or specify a security group (e.g., High-Risk Users).
3. (Optional) Click Exclude and select Break Glass Admin Accounts to prevent accidental lockout.
To list security groups via PowerShell, run:
Get-AzureADGroup -All $true | Select DisplayName, ObjectId
________________________________________
Step 3: Define Applications and Access Scope
1. Click Cloud apps or actions → Select apps.
2. Choose critical applications (e.g., Microsoft 365, Exchange Online, Azure Management).
3. (Optional) Select All cloud apps to enforce broad Zero Trust access control.
To retrieve registered enterprise apps, run:
Get-AzureADServicePrincipal | Select DisplayName, AppId
________________________________________
Step 4: Configure Zero Trust Conditions
1. Sign-in Risk Conditions:
o Go to Conditions → Sign-in Risk → Set Medium & High risk → Apply policy.
o This enforces MFA for risky sign-ins (e.g., sign-ins from leaked credentials).
2. Device Compliance Conditions:
o Go to Conditions → Device Platforms → Select Windows, macOS, iOS, Android.
o Enable Require compliant device to enforce managed device access.
3. Location-Based Restrictions:
o Go to Conditions → Locations → Exclude trusted IPs (e.g., corporate network).
o Block access from high-risk locations (e.g., anonymous VPNs, Tor exit nodes).
4. Session Controls for Continuous Access Evaluation:
o Go to Session → Enable Continuous Access Evaluation (CAE).
o This forces session validation every time risk changes.
________________________________________
Step 5: Define Access Control Actions
1. Click Access Controls → Grant.
2. Select:
o Require Multi-Factor Authentication (MFA).
o Require device to be compliant (managed via Intune).
o Require Hybrid Azure AD join (for domain-joined devices).
3. Click Select → Enable Policy → Create.
To apply MFA enforcement using PowerShell, run:
New-AzureADMSConditionalAccessPolicy -DisplayName "Zero Trust MFA Policy" -State "Enabled" -GrantControls @{BuiltInControls="Mfa"}
________________________________________
Step 6: Test and Monitor Policy Enforcement
1. Go to Sign-in logs → Conditional Access → View policy results.
2. Simulate a login attempt from a non-compliant device and ensure access is blocked.
3. Test sign-ins from a risky location and validate MFA prompts.
To check policy enforcement for a specific user, run:
Get-AzureADAuditSignInLogs -Filter "UserPrincipalName eq 'user at domain.com'" | Select ConditionalAccessStatus, AuthenticationRequirement
________________________________________
Outcome:
By configuring Zero Trust Conditional Access, organizations:
• Ensure real-time identity verification using MFA, device health, and location context.
• Block unauthorized access from high-risk sign-ins and untrusted devices.
• Protect cloud resources by dynamically enforcing session controls.
• Reduce security breaches through continuous access evaluation.
This approach strengthens identity security by applying adaptive, risk-based access controls, aligning with Zero Trust principles in Microsoft Entra ID.