Explore digital courses

Evaluate security risks that come with insecure application development patterns and practices

Units in this learning path:

• Introduction
• What Is Owasp Top 10
• Broken Access Control
• Cryptographic Failures
• Injection
• Insecure Design
• Security Misconfiguration
• Vulnerable Outdated Components
• Identification Authentication Failures
• Software Data Integrity Failures
• Security Logging Monitoring
• Server Side Request Forgery
• Summary

Products: Azure, Aspnet, Dotnet, Blazor

Roles: Developer, Devops Engineer, Security Engineer

Level: Beginner

Subjects: Security, Backend Development, Frontend Development, Cloud Security, Devops

Duration: 44 minutes

Discover how Microsoft Entra External ID can provide secure, seamless sign-in experiences for your consumers and business customers. Explore tenant creation, app registration, flow customization, and account security.

Units in this learning path:

• Introduction
• Prepare
• Create External Tenant
• Register Application
• Create Sign Up Sign in User Flow
• Add Admin Account
• Collect User Attributes During Sign Up
• Customize Look Feel
• Enable Social Identity Provider Sign in
• Validate Attributes Collected During Sign Up
• Enable Multifactor Authentication
• Knowledge Check
• Summary

Products: Entra External Id

Roles: Administrator, Developer, Identity Access Admin, Service Adoption Specialist, Solution Architect, Startup Founder

Level: Intermediate

Subjects: Identity Access

Duration: 108 minutes

Implement commonly flagged Microsoft Secure Score recommendations by using staged identity, application, privilege, recovery, and meeting controls.

Units in this learning path:

• Introduction
• Prepare Safe Administrative Environment
• Enforce Phishing Resistant Administrative Authentication
• Enforce Universal Multifactor Authentication
• Block Legacy Authentication
• Sign Risk Protection
• User Risk Protection
• Prevent Ungoverned Application Consent
• Configure Invited Participant Lobby Access
• Restrict Microsoft Teams Presentation Privileges
• Restrict Microsoft Teams Anonymous Participation
• Apply Least Privileged Administrative Roles
• Enable Self Service Password Reset
• Validate Security Controls
• Knowledge Check
• Summary

Products: M365, Entra Id, Office Teams

Roles: Administrator, Security Engineer

Level: Intermediate

Subjects: Security

Duration: 212 minutes

Learn how to deploy security baselines, onboard devices to Microsoft Defender for Endpoint, configure attack surface reduction rules, and monitor security posture across your organization.

Units in this learning path:

• Introduction
• Security Baselines
• Microsoft Defender Endpoint
• Attack Surface Reduction
• Exercise Harden Monitor Endpoints
• Knowledge Check
• Summary

Products: Intune, Defender Endpoint, Windows 11

Roles: Administrator, Security Engineer

Level: Intermediate

Subjects: Security, Threat Protection, Cloud Computing

Duration: 40 minutes

Hunt for threats using notebooks in Microsoft Sentinel

Units in this learning path:

• Introduction
• Access Azure Sentinel Data with External Tools
• Hunt
• Create Notebook
• Explore Notebook Code
• Knowledge Check
• Summary Resources

Products: Azure, Microsoft Sentinel

Roles: Security Operations Analyst

Level: Intermediate

Subjects: Threat Protection

Duration: 31 minutes

This certificate earner has advanced technical skills in cybersecurity, such as security posture evaluation, vulnerability assessment, network architecture, cloud infrastructure security, security operations, and incident reporting. Through completion of a comprehensive curriculum, application-based assessments, and authentic experiential learning, the earner has developed workplace and career management skills and industry knowledge, and is prepared for a cybersecurity career across industries.

This credential earner has the advanced skills to implement, monitor, and troubleshoot security measures to ensure the protection of sensitive information and compliance with relevant policies and regulations. The individual has the technical knowledge and practical skills to secure hardware and software, implement technical controls, manage data, respond to security incidents, implement disaster recovery plans, and troubleshoot issues. The earner has practiced essential workplace skills.

Discover and assess AI data risks in your environment using Microsoft Purview Data Security Posture Management (DSPM) for AI. Configure DSPM, assess SharePoint overexposure, and identify risks in Copilot and AI app interactions.

Units in this learning path:

• Introduction
• Configure Purview AI
• Assess Sharepoint Overexposure
• Identify Risks Copilot AI Interactions
• Knowledge Check
• Summary

Products: Microsoft Purview, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 21 minutes

Identify and mitigate AI data security risks.

Units in this learning path:

• Introduction
• Understand AI Security Risks
• Dspm AI Overview
• Configure Dspm AI
• Dspm AI Recommendations
• Review AI Security Reports
• Data Assessments
• Knowledge Check
• Summary

Products: Microsoft Purview, M365

Roles: Auditor, Administrator, Risk Practitioner

Level: Intermediate

Subjects: Information Protection Governance, Security

Duration: 48 minutes

Learn to use Cloud Security Posture Management (CSPM) in Microsoft Defender for Cloud to identify, prioritize, and trace security risks across Azure cloud and AI workloads — including attack path analysis and proactive risk hunting.

Units in this learning path:

• Introduction
• Explore Plans Posture Visibility
• Analyze Security Recommendations Risk Prioritization
• Identify Attack Paths Choke Points
• Hunt Risks Cloud Security Explorer
• Knowledge Check
• Summary

Products: Defender For Cloud, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 35 minutes

Learn how to use CodeQL to analyze the code in your GitHub repository and identify security vulnerabilities.

Units in this learning path:

• 1 Introduction
• 2 How Prepare Database Codeql
• 3 Run Codeql Database
• 4 Understand Results
• 5 Troubleshoot Your Results
• 6 Knowledge Check
• 7 Summary

Products: Github

Roles: Devops Engineer, Administrator, Developer, Student

Level: Intermediate

Subjects: Threat Protection

Duration: 33 minutes

Identify threats with Behavioral Analytics

Units in this learning path:

• Introduction
• Understand User Entity Behavior Analytics
• Explore Entities
• Display Information
• Use Anomaly Detection Analytical Rule Templates
• Knowledge Check
• Summary Resources

Products: Azure, Microsoft Sentinel

Roles: Security Operations Analyst

Level: Intermediate

Subjects: Threat Protection

Duration: 30 minutes