Explore digital courses

This credential earner has the advanced skills to implement, monitor, and troubleshoot security measures to ensure the protection of sensitive information and compliance with relevant policies and regulations. The individual has the technical knowledge and practical skills to secure hardware and software, implement technical controls, manage data, respond to security incidents, implement disaster recovery plans, and troubleshoot issues. The earner has practiced essential workplace skills.

Discover and assess AI data risks in your environment using Microsoft Purview Data Security Posture Management (DSPM) for AI. Configure DSPM, assess SharePoint overexposure, and identify risks in Copilot and AI app interactions.

Units in this learning path:

• Introduction
• Configure Purview AI
• Assess Sharepoint Overexposure
• Identify Risks Copilot AI Interactions
• Knowledge Check
• Summary

Products: Microsoft Purview, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 21 minutes

Identify and mitigate AI data security risks.

Units in this learning path:

• Introduction
• Understand AI Security Risks
• Dspm AI Overview
• Configure Dspm AI
• Dspm AI Recommendations
• Review AI Security Reports
• Data Assessments
• Knowledge Check
• Summary

Products: Microsoft Purview, M365

Roles: Auditor, Administrator, Risk Practitioner

Level: Intermediate

Subjects: Information Protection Governance, Security

Duration: 48 minutes

Learn to use Cloud Security Posture Management (CSPM) in Microsoft Defender for Cloud to identify, prioritize, and trace security risks across Azure cloud and AI workloads — including attack path analysis and proactive risk hunting.

Units in this learning path:

• Introduction
• Explore Plans Posture Visibility
• Analyze Security Recommendations Risk Prioritization
• Identify Attack Paths Choke Points
• Hunt Risks Cloud Security Explorer
• Knowledge Check
• Summary

Products: Defender For Cloud, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 35 minutes

Learn how to use CodeQL to analyze the code in your GitHub repository and identify security vulnerabilities.

Units in this learning path:

• 1 Introduction
• 2 How Prepare Database Codeql
• 3 Run Codeql Database
• 4 Understand Results
• 5 Troubleshoot Your Results
• 6 Knowledge Check
• 7 Summary

Products: Github

Roles: Devops Engineer, Administrator, Developer, Student

Level: Intermediate

Subjects: Threat Protection

Duration: 33 minutes

Identify threats with Behavioral Analytics

Units in this learning path:

• Introduction
• Understand User Entity Behavior Analytics
• Explore Entities
• Display Information
• Use Anomaly Detection Analytical Rule Templates
• Knowledge Check
• Summary Resources

Products: Azure, Microsoft Sentinel

Roles: Security Operations Analyst

Level: Intermediate

Subjects: Threat Protection

Duration: 30 minutes

Implement security policies for backend API protection using Azure API Management. Configure subscription key management, JSON Web Token (JWT) validation, and OAuth 2.0 policies, and apply IP filtering and rate limiting. Then enforce mutual Transport Layer Security (mTLS) for secure backend API connections, and configure AI Gateway to secure and govern AI model endpoints.

Units in this learning path:

• Introduction
• Configure Authentication Authorization Policies
• Implement Network Security Threat Protection
• Secure Management Back End Connections
• Configure Application Gateway Management
• Knowledge Check
• Summary

Products: Azure, Azure API Management, Azure Openai, Defender For Cloud

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 36 minutes

Learn how to use Azure App Configuration service to centrally manage and secure your configuration settings, and to manage app features.

Units in this learning path:

• Introduction
• Explore Service
• Create Paired Keys Values
• Manage Application Features
• Secure Data
• Retrieve Configuration Settings
• Knowledge Check
• Summary

Products: Azure App Configuration

Roles: Developer

Level: Intermediate

Subjects: Security

Duration: 36 minutes

Implement Azure Key Vault

Units in this learning path:

• Introduction
• Explore
• Discover Best Practices
• Authenticate to
• Exercise Set Retrieve Secret from by Using Azure Cli
• Knowledge Check
• Summary

Products: Azure Key Vault

Roles: Developer

Level: Intermediate

Subjects: Cloud Security

Duration: 48 minutes

Enable Microsoft Defender for Databases to detect SQL injection, anomalous query patterns, and vulnerability exposures across Azure SQL services. Enable protection at subscription scope using Azure Policy, configure vulnerability assessment baselines, and route security alerts to the security operations team.

Units in this learning path:

• Introduction
• Explore Defender Databases Capabilities
• Enable Defender Azure SQL Databases
• Enable Defender Open Source Databases
• Configure Vulnerability Assessment
• Configure Alert Routing Validate Coverage
• Knowledge Check
• Summary

Products: Azure, Azure SQL Database, Azure SQL Managed Instance, Microsoft Defender

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security, Databases

Duration: 21 minutes

Onboard Azure virtual machines and Arc-connected hybrid servers to Microsoft Defender for Servers. Select Plan 1 or Plan 2, configure vulnerability scanning using agentless and agent-based approaches. Then integrate Microsoft Defender for Endpoint, manage agentless scanning, and enable File Integrity Monitoring.

Units in this learning path:

• Introduction
• Onboard Servers Defender Servers
• Configure Vulnerability Scanning
• Configure Endpoint Agentless Scan File Integrity Monitoring
• Knowledge Check
• Summary

Products: Defender For Cloud, Azure Virtual Machines, Azure Arc, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 26 minutes

Enable and configure Microsoft Defender for Storage to detect threats against Azure Blob Storage, Azure Files, and Azure Data Lake Storage. Configure activity monitoring, malware scanning with cost controls, sensitive data threat detection, and alert routing to ensure Defender outputs reach the appropriate security team.

Units in this learning path:

• Introduction
• Explore Defender Storage Capabilities
• Enable Deploy Defender Storage
• Configure Malware Scanning Sensitive Data
• Configure Alert Routing Validate Coverage
• Knowledge Check
• Summary

Products: Azure Storage, Defender For Cloud, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 22 minutes