Explore digital courses

Use Microsoft Entra to manage access by using entitlements, access reviews, privileged access tools, and monitor access events. (SC-5008)

Modules in this learning path:

• Plan Implement Entitlement Management
• Plan Implement Manage Access Review
• Monitor Maintain Azure Active Directory
• Plan Implement Privileged Access

Products: Entra, Entra Id, Entra Identity Governance

Roles: Administrator, Identity Access Admin

Level: Intermediate

Subjects: Identity Access

Duration: 203 minutes

Configure and manage automation using Microsoft Defender for Endpoint

Units in this learning path:

• Introduction
• Configure Advanced Features
• Upload Folder Settings
• Configure Automated Investigation Remediation Capabilities
• Block at Risk Devices
• Knowledge Check
• Summary Resources

Products: M365, M365 Security Center, Windows 11, Windows Security, Defender Endpoint, Intune, Entra Id

Roles: Security Operations Analyst

Level: Intermediate

Subjects: Information Protection Governance, Threat Protection, Automation

Duration: 34 minutes

This module describes how to control access to files and folders using permissions.

Units in this learning path:

• Introduction
• Explore Tools Used Managing Files Folders
• Understand File Folder Permissions
• Understand Permission Inheritance
• Implement Conditions Limit File Folder Access
• Understand Effective Permissions
• Use Effective Access Feature
• Examine Permissions When Copying Moving Files
• Knowledge Check
• Summary

Products: Windows

Roles: Administrator

Level: Beginner

Subjects: Information Protection Governance

Duration: 29 minutes

Safeguard your AI workloads with Microsoft Foundry guardrails. Discover how to configure and validate content filters, blocklists, and Prompt Shields to protect sensitive data, ensure responsible model behavior, and continuously improve AI safety.

Units in this learning path:

• Introduction
• Understand Guardrails
• Understand Safety Controls
• Try Guardrails
• Create Manage Blocklist
• Configure Content Filter
• Choose Refine Guardrails
• Knowledge Check
• Summary

Products: Azure, Microsoft Foundry, Defender For Cloud

Roles: Security Engineer, Developer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 48 minutes

Learn to set up Azure Monitor and Microsoft Sentinel for automatic security monitoring and response in cloud settings.

Units in this learning path:

• Introduction
• Security Alerts Incidents
• Automate Responses Microsoft Defender Cloud Triggers
• Log Retention Plans in Microsoft Sentinel
• Alerts Incidents Microsoft Sentinel
• Microsoft Sentinel Data Connectors
• Enable Analytics Rules Microsoft Sentinel
• Respond Threats by Using Playbooks with Automation Rules Microsoft Sentinel
• Automating Threat Response with Microsoft Sentinel
• Knowledge Check
• Summary

Products: Azure, Microsoft Sentinel

Roles: Administrator, Security Engineer

Level: Intermediate

Subjects: Threat Protection

Duration: 72 minutes

Configure a security-hardened Azure Key Vault for enterprise workloads. Apply soft delete and purge protection, enforce least-privilege RBAC access with just-in-time activation, and secure the network perimeter using firewall rules and private endpoints.

Units in this learning path:

• Introduction
• Deploy Key Vault
• Configure Access
• Configure Firewall Network
• Knowledge Check
• Summary

Products: Azure Key Vault, Azure, Azure Virtual Network, Azure Private Link

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 27 minutes

Learn how to configure and secure devices using Microsoft Intune configuration profiles, compliance policies, and dynamic group targeting.

Units in this learning path:

• Introduction
• Create Assign Configuration Profiles
• Create Assign Compliance Policies
• Target Policies Dynamic Groups
• Exercise Assign Validate Policies
• Automate Remediation Noncompliance
• Knowledge Check
• Summary

Products: Intune, Entra Id, M365

Roles: Administrator, Security Engineer

Level: Intermediate

Subjects: Security, Cloud Computing

Duration: 45 minutes

Configure audit logging for Azure SQL Database and SQL Managed Instance to create tamper-resistant compliance records. Set audit action groups, route logs to Azure Monitor, Event Hubs, and immutable blob storage, and configure SQL Managed Instance–specific auditing to meet financial regulatory audit requirements.

Units in this learning path:

• Introduction
• Describe Azure SQL Auditing Capabilities
• Configure Audit Destinations
• Configure Auditing SQL Managed Instance
• Design Compliant Audit Strategy
• Knowledge Check
• Summary

Products: Azure, Azure SQL Database, Azure SQL Managed Instance, Azure Monitor

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security, Databases

Duration: 20 minutes

Configure for alerts and detections in Microsoft Defender for Endpoint

Units in this learning path:

• Introduction
• Configure Advanced Features
• Configure Alert Notifications
• Manage Alert Suppression
• Manage Indicators
• Knowledge Check
• Summary Resources

Products: M365, Defender Endpoint, Defender Xdr

Roles: Security Operations Analyst

Level: Intermediate

Subjects: Threat Protection

Duration: 32 minutes

Configure network-layer access controls for Azure Storage accounts. Apply firewall rules, define virtual network and IP-based access, configure resource instance rules for Azure AI services, manage trusted service exceptions, and implement private endpoints to eliminate public endpoint exposure.

Units in this learning path:

• Introduction
• Describe Storage Network Security
• Configure Vnet Ip Rules
• Configure Resource Instance Rules
• Implement Private Endpoints
• Knowledge Check
• Summary

Products: Azure, Azure Storage, Azure Virtual Network, Azure Private Link

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security, Networking

Duration: 21 minutes

Learn how to implement network security groups, and ensure network security group rules are correctly applied.

Units in this learning path:

• Introduction
• Implement
• Determine Nsg Rules
• Determine Nsg Effective Rules
• Create Nsg Rules
• Implement Asgs New
• Interactive Lab Simulation Network Groups
• Knowledge Check
• Summary Resources

Products: Azure

Roles: Administrator

Level: Intermediate

Subjects: Identity Access, Networking

Duration: 43 minutes

Configure authentication, network isolation, encryption, and access controls for Azure SQL Database and SQL Managed Instance. Implement Microsoft Entra ID–only authentication with managed identity access for AI workloads, deploy private endpoints, and apply transparent data encryption, dynamic data masking, and row-level security to protect sensitive financial data.

Units in this learning path:

• Introduction
• Configure Authentication Managed Identity
• Implement Network Isolation
• Encrypt Protect Data
• Apply Data Masking Row Level Security
• Knowledge Check
• Summary

Products: Azure, Azure SQL Database, Azure SQL Managed Instance

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security, Databases

Duration: 21 minutes