Explore digital courses

Design for user identities and profiles

Units in this learning path:

• Introduction
• Select Appropriate Licensing Model for Azure Virtual Desktop Based Requirements
• Personal Multi Session Desktop Scenarios
• Recommend Appropriate Storage Solution
• Plan for Desktop Client Deployment
• Plan for Azure Virtual Desktop Client Deployment Remote Desktop Protocol Rdp
• Windows Desktop Client to Multiple Devices
• Hybrid Identity Azure Active Directory
• Plan for Azure Ad Connect
• Knowledge Check
• Summary

Products: Azure, Azure Virtual Desktop, Azure Virtual Machines

Roles: Administrator, Solution Architect

Level: Intermediate

Subjects: Identity Access

Duration: 64 minutes

Azure Architects design and recommend governance solutions.

Units in this learning path:

• Introduction
• Design for Governance
• Design for Management Groups
• Design for Subscriptions
• Design for Resource Groups
• Design for Resource Tags
• Design for Azure Policy
• Design for Role Based Access Control
• Design for Azure Landing Zones
• Knowledge Check
• Summary Resources

Products: Azure Policy, Azure Resource Manager

Roles: Solution Architect

Level: Advanced

Subjects: Information Protection Governance

Duration: 49 minutes

You'll learn about the Cloud Adoption Framework (CAF) and Well-Architected Framework (WAF) and how you can use them to design more secure solutions.

Units in this learning path:

• Introduction
• Introduction Cloud Adoption Framework
• Cloud Adoption Framework Secure Methodology
• Introduction Azure Landing Zones
• Design Security with Azure Landing Zones
• Introduction Well Architected Framework
• Well Architected Framework Security Pillar
• Evaluate Security Strategy
• Define Security Strategy
• Design Security Governance Strategy
• Design Devsecops Processes
• Cloud Adoption Framework Secure AI
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 120 minutes

Learn how to design identity and access management solutions for cloud, hybrid, and multicloud environments, including external identities, Conditional Access, and secrets management.

Units in this learning path:

• Introduction
• Design Cloud Hybrid Multi Cloud Access Strategies
• Design Solution Entra Hybrid Multicloud
• Design Solution External Identities
• Design Modern Authentication Authorization Strategies
• Design Solution Agent Identities
• Conditional Access Agent Id
• Align Conditional Access Zero Trust
• Specify Requirements Secure Active Directory Domain Services
• Design Solution Manage Secrets Keys Certificates
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel, Entra Id

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security, Identity Access

Duration: 111 minutes

You learn how to design secure network solutions using techniques like network segmentation, traffic filtering, network monitoring, and posture management.

Units in this learning path:

• Introduction
• Evaluate Network Designs Best Practices
• Design Solutions Network Segmentation
• Design Solutions Traffic Filtering Network Security Groups
• Design Solutions Network Posture Management
• Design Solutions Network Monitoring
• Evaluate Solutions Entra Internet Access
• Evaluate Solutions Entra Private Access
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 76 minutes

Learn how to design security solutions that address regulatory compliance requirements across multicloud environments. Translate compliance requirements into security controls using Zero Trust principles, Microsoft Purview, Microsoft Priva, Azure Policy, and Microsoft Defender for Cloud.

Units in this learning path:

• Introduction Regulatory Compliance
• Translate Compliance Requirements Security Solution
• AI Compliance Considerations
• Address Compliance Requirements Microsoft Purview
• Address Privacy Requirements Microsoft Priva
• Address Security Compliance Requirements Azure Policy
• Evaluate Infrastructure Compliance Defender Cloud
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 60 minutes

You learn about designing solutions that secure an organization's data using capabilities like Microsoft Purview, Defender for SQL, Defender for Storage.

Units in this learning path:

• Introduction
• Introduction Data Security
• Design Solution Data Discovery Classification Microsoft Purview
• Design Solution Data Protection
• Design Data Security Azure Workloads
• Design Security Data AI Workloads
• Design Security Azure Storage
• Design Security Defender SQL Storage
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 66 minutes

You learn how to secure applications, APIs and the development process using techniques like posture management, threat modeling, and secure access for workload identities.

Units in this learning path:

• Introduction Application Security
• Design Implement Standards Secure Application Development
• Design Full Lifecycle Strategy Application Security
• Evaluate Security Posture Existing Application Portfolios
• Evaluate Application Threats Threat Modeling
• Secure Access Workload Identities
• Design Solution API Management Security
• Design Solution Secure Access Applications
• Map Technologies Application Security Requirements
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 78 minutes

You learn advanced techniques for designing solutions that secure privileged access using Zero Trust principles, the Enterprise Access Model, and Microsoft security frameworks.

Units in this learning path:

• Introduction
• Introduction Privileged Access
• Enterprise Access Model
• Design Identity Governance Solutions
• Design Solution Secure Tenant Administration
• Design Cloud Infrastructure Entitlement Management
• Design Solution Privileged Access Workstations Bastion Services
• Evaluate Access Review Management Solution
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 58 minutes

You learn how to analyze the security requirements for different types of endpoints including servers, clients, IoT, OT, mobile, and embedded devices. These requirements take into account different platforms and operating systems and set standards for endpoint protection, hardening, and configuration.

Units in this learning path:

• Introduction Endpoint Security
• Specify Server Security Requirements
• Specify Requirements Mobile Devices Clients
• Specify Embedded Device Security Requirements
• Design Solution Securing Operational Technology Industrial Control Systems
• Specify Security Baselines Server Client Endpoints
• Design Solution Secure Remote Access
• Evaluate Windows Local Admin Password Solution
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 69 minutes

You learn techniques to design security operations capabilities including logging, auditing, Security Information, and Event Management (SIEM), Security Orchestration and Automated Response (SOAR), and security workflows.

Units in this learning path:

• Introduction
• Introduction Security Operations Secops
• Design Security Operations Capabilities Hybrid Multicloud Environments
• Design Centralized Logging Auditing
• Design Solutions Detection Response
• Design Solution Security Orchestration Automation Response
• Design Security Workflows
• Design Threat Detection Coverage
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 87 minutes

You learn how to design security posture management solutions that integrate into hybrid and multicloud scenarios using capabilities in Microsoft Defender for Cloud, Azure Arc, and Microsoft Cloud Security Benchmark (MCSB).

Units in this learning path:

• Introduction Hybrid Multi Cloud Posture Management
• Evaluate Security Posture Microsoft Cloud Security Benchmark
• Design Integrated Posture Management Workload Protection
• Evaluate Security Posture Microsoft Defender Cloud
• Design Cloud Workload Protection Microsoft Defender Cloud
• Integrate Hybrid Multi Cloud Environments Azure Arc
• Design Solution External Attack Surface Management
• Posture Management Using Exposure Management Attack Paths
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 64 minutes