Explore digital courses

You learn advanced techniques for designing solutions that secure privileged access using Zero Trust principles, the Enterprise Access Model, and Microsoft security frameworks.

Units in this learning path:

• Introduction
• Introduction Privileged Access
• Enterprise Access Model
• Design Identity Governance Solutions
• Design Solution Secure Tenant Administration
• Design Cloud Infrastructure Entitlement Management
• Design Solution Privileged Access Workstations Bastion Services
• Evaluate Access Review Management Solution
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 58 minutes

You learn how to analyze the security requirements for different types of endpoints including servers, clients, IoT, OT, mobile, and embedded devices. These requirements take into account different platforms and operating systems and set standards for endpoint protection, hardening, and configuration.

Units in this learning path:

• Introduction Endpoint Security
• Specify Server Security Requirements
• Specify Requirements Mobile Devices Clients
• Specify Embedded Device Security Requirements
• Design Solution Securing Operational Technology Industrial Control Systems
• Specify Security Baselines Server Client Endpoints
• Design Solution Secure Remote Access
• Evaluate Windows Local Admin Password Solution
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 88 minutes

You learn techniques to design security operations capabilities including logging, auditing, Security Information, and Event Management (SIEM), Security Orchestration and Automated Response (SOAR), and security workflows.

Units in this learning path:

• Introduction
• Introduction Security Operations Secops
• Design Security Operations Capabilities Hybrid Multicloud Environments
• Design Centralized Logging Auditing
• Design Solutions Detection Response
• Design Solution Security Orchestration Automation Response
• Design Security Workflows
• Design Threat Detection Coverage
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 87 minutes

You learn how to design security posture management solutions that integrate into hybrid and multicloud scenarios using capabilities in Microsoft Defender for Cloud, Azure Arc, and Microsoft Cloud Security Benchmark (MCSB).

Units in this learning path:

• Introduction Hybrid Multi Cloud Posture Management
• Evaluate Security Posture Microsoft Cloud Security Benchmark
• Evaluate Security Posture Microsoft Defender Cloud
• Design Integrated Posture Management Workload Protection
• Design Cloud Workload Protection Microsoft Defender Cloud
• Integrate Hybrid Multi Cloud Environments Azure Arc
• Design Solution External Attack Surface Management
• Posture Management Using Exposure Management Attack Paths
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 70 minutes

You learn about the Microsoft Cybersecurity Reference Architecture (MCRA) and Microsoft Cloud Security Benchmark (MCSB) and how you can use them to design more secure solutions.

Units in this learning path:

• Introduction
• Introduction Reference Architecture Benchmark
• Describe Microsoft Cloud Security Benchmark
• Design Solutions Best Practices Capabilities Controls
• Design Solutions Best Practices Attack Protection
• Design Solutions AI Security
• Design Solutions Rapid Modernization Plan
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 67 minutes

Design, deploy, operate, and recover guarded fabrics and shielded virtual machines on Windows Server 2025 while preserving host trust and owner key custody.

Units in this learning path:

• Introduction
• Evaluate Platform Prerequisites
• Deploy Host Guardian Service
• Establish Trusted Platform Module Attestation
• Evaluate Host Key Attestation
• Establish Virtual Machine Ownership
• Prepare Shielded Virtual Machine Provisioning Artifacts
• Provision Shielded Virtual Machines
• Manage Shielded Virtual Machine Operations
• Service Guarded Fabrics
• Respond to Guarded Fabric Compromise
• Recover Guarded Fabrics
• Diagnose Guarded Fabric Failures
• Knowledge Check
• Summary

Products: Windows Server

Roles: Administrator, Security Engineer

Level: Advanced

Subjects: Security, Infrastructure

Duration: 174 minutes

Detect misconfigurations and runtime risks across container workloads using Microsoft Defender for Containers. Enable and configure the Defender for Containers plan, and assess container image vulnerabilities in Azure Container Registry. Then respond to runtime threat alerts and security posture recommendations for Azure Kubernetes Service (AKS) clusters.

Units in this learning path:

• Introduction
• Explore Defender for Containers
• Enable Configure Defender Containers
• Assess Container Image Vulnerabilities
• Detect Run Time Threats
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Azure Kubernetes Service, Azure Container Registry

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security, Containers

Duration: 36 minutes

Build strategies around security and compliance and prepare for Exam AZ-400: Designing and Implementing Microsoft DevOps Solutions.

Modules in this learning path:

• Intro to Azure Ad
• Manage Users and Groups in Aad
• Monitor Report Aad Security Events
• Maintain Secure Repository Github
• Improve Reliability Failure
• Improve Reliability Incidents

Products: Azure, Entra Id, Azure Key Vault, Azure API Management, Azure Monitor

Roles: Devops Engineer, Administrator, Developer, Solution Architect, Security Engineer

Level: Beginner

Subjects: Information Protection Governance, Site Reliability Engineering, Security

Duration: 253 minutes

Amazon DynamoDB reflects a paradigm shift away from relational databases in terms of management, usage, and schema design. To fully take advantage of DynamoDB and its feature set, developers and architects need to understand how applications…

This is an introductory course on the differences between security groups and NACLs, or Network Access Control Lists. In this course, we discuss how to secure the networking of your applications in AWS by using these two resources. We also review…

Organizations are facing increasing complexity in an evolving sovereignty landscape. As a result, you may be concerned with how to remain compliant and acquire the right tools and services without sacrificing the benefits of working in the cloud.…

Use Microsoft Defender External Attack Surface Management (EASM) to discover unknown internet-facing assets, analyze attack surface dashboards, and integrate outside-in findings with Defender CSPM for attack path analysis.

Units in this learning path:

• Introduction
• Explore External Attack Surface Capabilities
• Discover Assets Recursive Discovery
• Analyze Attack Surface Dashboards
• Integrate External Attack Surface Defender Cloud
• Knowledge Check
• Summary

Products: Defender For Cloud, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 35 minutes