Explore digital courses

Eliminate public network exposure of Azure PaaS and AI services using private endpoints and Azure Private Link. Configure private endpoints, integrate private DNS, expose internal services using Private Link service, and enforce private access adoption using Azure Policy and Defender for Cloud.

Units in this learning path:

• Introduction
• Assess Risk Public Paas Endpoint Exposure
• Configure Private Endpoints Eliminate Public Paas Exposure
• Expose Internal Services Azure Private Link Service
• Enforce Audit Private Endpoint Adoption
• Knowledge Check
• Summary

Products: Azure, Azure Private Link, Azure Virtual Network, Defender For Cloud

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Networking

Duration: 43 minutes

Enable and configure the Defender for AI Services Cloud Workload Protection plan in Microsoft Defender for Cloud. The plan helps to detect threats targeting Azure AI services workloads and monitor AI security posture.

Units in this learning path:

• Introduction
• Enable Configure AI Services Plan
• Monitor AI Security Dashboard
• Knowledge Check
• Summary

Products: Defender For Cloud, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Cloud Security

Duration: 20 minutes

Learn to enable and configure Cloud Workload Protection Platform (CWPP) plans in Microsoft Defender for Cloud, including Defender for Servers, Storage, Databases, APIs, and AI Services — and how to deploy protection at scale and verify coverage.

Units in this learning path:

• Introduction
• Explore Workload Protection Plan Catalog
• Enable Plans Environment Settings
• Configure Storage Database Plans
• Deploy Plans Scale Verify Coverage
• Knowledge Check
• Summary

Products: Defender For Cloud, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 33 minutes

Enable and configure just-in-time VM access in Microsoft Defender for Cloud to eliminate permanently open RDP and SSH ports. Configure per-port access policies, request time-bound access, audit access activity, and enforce JIT adoption across your VM estate using Azure Policy.

Units in this learning path:

• Introduction
• Examine Access Requirements
• Enable Configure Policies
• Request Access Audit Activity
• Knowledge Check
• Summary

Products: Defender For Cloud, Azure Virtual Machines, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 24 minutes

Enable and configure real-time runtime protection for Microsoft Copilot Studio agents using Microsoft Defender for Cloud Apps. Discover agents in your environment, enable protection through the Defender portal Security for AI settings, and verify that protection outputs flow into Microsoft Defender XDR.

Units in this learning path:

• Introduction
• Explore Copilot Studio AI Agent Protection
• Enable Protection Microsoft Defender
• Review AI Agent Protection Outputs
• Knowledge Check
• Summary

Products: Defender For Cloud Apps, Defender Xdr, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 25 minutes

This course is the fourth in the six-course Junior Cybersecurity Analyst Pathway, aligned to the CCST (Cisco Certified Support Technician) Cybersecurity certification. In this course, you will learn how to assess the network, operating systems, and endpoints for vulnerabilities, and how to secure the network. You will also gain skills to maintain the integrity, confidentiality, and availability in your network and your data.

Audit and enforce OS security configuration on Azure virtual machines and Arc-enabled servers using Azure Machine Configuration. Apply built-in Windows and Linux security baseline policies, configure audit and enforce modes, and author custom machine configurations for organization-specific requirements.

Units in this learning path:

• Introduction
• Explore Machine Configuration Capabilities
• Apply Built in Security Baseline Policies
• Author Assign Custom Machine Configurations
• Knowledge Check
• Summary

Products: Azure Virtual Machines, Azure Arc, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 24 minutes

Enforce security standards before resources reach production using Azure Policy. Assign built-in policy definitions and initiatives at management group scope, author custom definitions with automated remediation tasks, and protect critical resources from deletion using Azure resource locks.

Units in this learning path:

• Introduction
• Assign Built in Policy Definitions
• Create Deploy Custom Policy Definitions
• Implement Resource Locks
• Knowledge Check
• Summary

Products: Azure Policy, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security, Compliance

Duration: 25 minutes

Enforce security governance and regulatory compliance across Azure environments using Azure Policy, Microsoft Defender for Cloud, Azure RBAC. Then enable Azure Backup security features, and infrastructure as code scanning.

Modules in this learning path:

• Enforce Governance Azure Policy Resource Locks
• Configure Defender Cloud Security Controls
• Evaluate Regulatory Compliance
• Manage Right Size Rbac Role Assignments
• Protect Backup Data Azure Backup Security
• Implement Security Controls Infrastructure As Code

Products: Azure, Defender For Cloud, Azure Policy, Entra Id, Azure Backup

Roles: Security Engineer

Level: Intermediate, Advanced

Subjects: Security, Cloud Security, Compliance, Identity Access, Devops

Duration: 143 minutes

Enhance security operations by using Microsoft Security Copilot (SC-5006).

Modules in this learning path:

• Fundamentals Generative AI
• Security Copilot Getting Started
• Security Copilot Describe Core Features
• Security Copilot Embedded Experiences
• Security Copilot Describe Agents
• Security Copilot Interactive Guides

Products: Defender Xdr, Microsoft Sentinel, Intune, Entra, Defender For Threat Intelligence, Ms Copilot

Roles: Student, Security Engineer, Security Operations Analyst, Business User, Business Owner

Level: Beginner

Subjects: Security, Artificial Intelligence

Duration: 372 minutes

Learn how to enroll devices in Microsoft Intune and validate successful enrollment using portal tools and troubleshooting techniques.

Units in this learning path:

• Introduction
• Enroll Windows Device
• Validate Device Join Management
• Apply Platform Ownership Restrictions
• Troubleshoot Device Enrollment
• Knowledge Check
• Summary

Products: M365, Intune, Entra Id

Roles: Administrator, Security Engineer

Level: Intermediate

Subjects: Identity Access, Cloud Computing

Duration: 40 minutes

This badge earner has completed all the learning activities included in this online learning experience, including hands-on experience, concepts, methods and tools related to the enterprise security domain. The individual has demonstrated skills and understanding in the approaches to elevate an organization’s overall security posture, by adopting practices, methods and tools that increase enterprise cyber resilience.