Explore digital courses

Design for user identities and profiles

Units in this learning path:

• Introduction
• Select Appropriate Licensing Model for Azure Virtual Desktop Based Requirements
• Personal Multi Session Desktop Scenarios
• Recommend Appropriate Storage Solution
• Plan for Desktop Client Deployment
• Plan for Azure Virtual Desktop Client Deployment Remote Desktop Protocol Rdp
• Windows Desktop Client to Multiple Devices
• Hybrid Identity Azure Active Directory
• Plan for Azure Ad Connect
• Knowledge Check
• Summary

Products: Azure, Azure Virtual Desktop, Azure Virtual Machines

Roles: Administrator, Solution Architect

Level: Intermediate

Subjects: Identity Access

Duration: 64 minutes

Azure Architects design and recommend governance solutions.

Units in this learning path:

• Introduction
• Design for Governance
• Design for Management Groups
• Design for Subscriptions
• Design for Resource Groups
• Design for Resource Tags
• Design for Azure Policy
• Design for Role Based Access Control
• Design for Azure Landing Zones
• Knowledge Check
• Summary Resources

Products: Azure Policy, Azure Resource Manager

Roles: Solution Architect

Level: Advanced

Subjects: Information Protection Governance

Duration: 49 minutes

You'll learn about the Cloud Adoption Framework (CAF) and Well-Architected Framework (WAF) and how you can use them to design more secure solutions.

Units in this learning path:

• Define Security Strategy
• Introduction Cloud Adoption Framework
• Cloud Adoption Framework Secure Methodology
• Introduction Azure Landing Zones
• Design Security with Azure Landing Zones
• Introduction Well Architected Framework
• Well Architected Framework Security Pillar
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 83 minutes

You learn about various strategies for managing identities and access to resources, including hybrid and multicloud scenarios, external identities, and conditional access.

Units in this learning path:

• Introduction
• Design Cloud Hybrid Multi Cloud Access Strategies
• Design Solution External Identities
• Design Modern Authentication Authorization Strategies
• Align Conditional Access Zero Trust
• Specify Requirements Secure Active Directory Domain Services
• Design Solution Manage Secrets Keys Certificates
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 70 minutes

You learn how to design secure network solutions using techniques like network segmentation, traffic filtering, network monitoring, and posture management.

Units in this learning path:

• Introduction
• Design Solutions Network Segmentation
• Design Solutions Traffic Filtering Network Security Groups
• Design Solutions Network Posture Management
• Design Solutions Network Monitoring
• Evaluate Solutions Entra Internet Access
• Evaluate Solutions Entra Private Access
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 51 minutes

You'll learn how to interpret and translate regulatory requirements into technical solutions. You'll also learn how to use capabilities found in Microsoft Purview, Microsoft Priva, and Defender for Cloud for compliance.

Units in this learning path:

• Introduction Regulatory Compliance
• Translate Compliance Requirements Security Solution
• Address Compliance Requirements Microsoft Purview
• Address Privacy Requirements Microsoft Priva
• Address Security Compliance Requirements Azure Policy
• Evaluate Infrastructure Compliance Defender Cloud
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 68 minutes

You learn how to design security solutions for Exchange, Sharepoint, OneDrive, and Teams.

Units in this learning path:

• Introduction Security Exchange Sharepoint Onedrive Teams
• Evaluate Security Posture Collaboration Productivity Workloads
• Design Microsoft Defender 365 Solution
• Design Configurations Operational Practices Microsoft 365
• Evaluate Data Security Compliance Copilot
• Evaluate Solutions Securing Data Microsoft Purview
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 62 minutes

You learn about designing solutions that secure an organization's data using capabilities like Microsoft Purview, Defender for SQL, Defender for Storage.

Units in this learning path:

• Introduction Data Security
• Design Solution Data Discovery Classification Microsoft Purview
• Design Solution Data Protection
• Design Data Security Azure Workloads
• Design Security Azure Storage
• Design Security Defender SQL Storage
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 61 minutes

You learn how to secure applications, APIs and the development process using techniques like posture management, threat modeling, and secure access for workload identities.

Units in this learning path:

• Introduction Application Security
• Design Implement Standards Secure Application Development
• Evaluate Security Posture Existing Application Portfolios
• Evaluate Application Threats Threat Modeling
• Design Security Lifecycle Strategy Applications
• Secure Access Workload Identities
• Design Solution API Management Security
• Design Solution Secure Access Applications
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 89 minutes

You learn advanced techniques for designing solutions that manage privileged access effectively.

Units in this learning path:

• Introduction Privileged Access
• Enterprise Access Model
• Design Identity Governance Solutions
• Design Solution Secure Tenant Administration
• Design Solution Privileged Access Workstations Bastion Services
• Evaluate Access Review Management Solution
• Evaluate Security Active Directory Domain Services
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 88 minutes

You learn how to analyze the security requirements for different types of endpoints including servers, clients, IoT, OT, mobile, and embedded devices. These requirements take into account different platforms and operating systems and set standards for endpoint protection, hardening, and configuration.

Units in this learning path:

• Introduction Endpoint Security
• Specify Server Security Requirements
• Specify Requirements Mobile Devices Clients
• Specify Embedded Device Security Requirements
• Design Solution Securing Operational Technology Industrial Control Systems
• Specify Security Baselines Server Client Endpoints
• Design Solution Secure Remote Access
• Evaluate Windows Local Admin Password Solution
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 100 minutes

You learn techniques to design security operations capabilities including logging, auditing, Security Information, and Event Management (SIEM), Security Orchestration and Automated Response (SOAR), and security workflows.

Units in this learning path:

• Introduction Security Operations Secops
• Design Security Operations Capabilities Hybrid Multicloud Environments
• Design Centralized Logging Auditing
• Design Security Information Event Management Solutions
• Design Solutions Detection Response
• Design Solution Security Orchestration Automation Response
• Design Security Workflows
• Design Threat Detection Coverage
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 81 minutes