Explore digital courses

Implement security policies for backend API protection using Azure API Management. Configure subscription key management, JSON Web Token (JWT) validation, and OAuth 2.0 policies, and apply IP filtering and rate limiting. Then enforce mutual Transport Layer Security (mTLS) for secure backend API connections, and configure AI Gateway to secure and govern AI model endpoints.

Units in this learning path:

• Introduction
• Configure Authentication Authorization Policies
• Implement Network Security Threat Protection
• Secure Management Back End Connections
• Configure Application Gateway Management
• Knowledge Check
• Summary

Products: Azure, Azure API Management, Azure Openai, Defender For Cloud

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 36 minutes

Enable Microsoft Defender for Databases to detect SQL injection, anomalous query patterns, and vulnerability exposures across Azure SQL services. Enable protection at subscription scope using Azure Policy, configure vulnerability assessment baselines, and route security alerts to the security operations team.

Units in this learning path:

• Introduction
• Explore Defender Databases Capabilities
• Enable Defender Azure SQL Databases
• Enable Defender Open Source Databases
• Configure Vulnerability Assessment
• Configure Alert Routing Validate Coverage
• Knowledge Check
• Summary

Products: Azure, Azure SQL Database, Azure SQL Managed Instance, Microsoft Defender

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security, Databases

Duration: 21 minutes

Onboard Azure virtual machines and Arc-connected hybrid servers to Microsoft Defender for Servers. Select Plan 1 or Plan 2, configure vulnerability scanning using agentless and agent-based approaches. Then integrate Microsoft Defender for Endpoint, manage agentless scanning, and enable File Integrity Monitoring.

Units in this learning path:

• Introduction
• Onboard Servers Defender Servers
• Configure Vulnerability Scanning
• Configure Endpoint Agentless Scan File Integrity Monitoring
• Knowledge Check
• Summary

Products: Defender For Cloud, Azure Virtual Machines, Azure Arc, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 26 minutes

Enable and configure Microsoft Defender for Storage to detect threats against Azure Blob Storage, Azure Files, and Azure Data Lake Storage. Configure activity monitoring, malware scanning with cost controls, sensitive data threat detection, and alert routing to ensure Defender outputs reach the appropriate security team.

Units in this learning path:

• Introduction
• Explore Defender Storage Capabilities
• Enable Deploy Defender Storage
• Configure Malware Scanning Sensitive Data
• Configure Alert Routing Validate Coverage
• Knowledge Check
• Summary

Products: Azure Storage, Defender For Cloud, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 22 minutes

Organizations need to classify, label, and protect sensitive data to prevent exposure and ensure compliance. Microsoft Purview solutions provide data classification, sensitivity labels, and encryption to secure information across Microsoft 365 and on-premises storage. This learning path aligns with exam SC-401: Microsoft Information Security Administrator.

Modules in this learning path:

• Purview Protect Sensitive Data
• M365 Compliance Information Classify Data
• Purview Review Analyze Data Classification
• Create Manage Sensitive Information Types
• M365 Compliance Information Protect Information
• Apply Manage Sensitivity Labels
• Purview Protect on Premises Data
• Audit Encryption
• Deploy Message Encryption Microsoft 365

Products: Microsoft Purview, M365

Roles: Auditor, Administrator, Ip Admin

Level: Intermediate

Subjects: Security, Information Protection Governance

Duration: 376 minutes

After completing this learning path, you’ll know how to implement identity in Azure. You’ll be able to extend an existing on-premises Active Directory identity service into Azure.

Modules in this learning path:

• Implement Hybrid Identity with Windows Server
• Deploy Manage Azure Iaas Active Directory Domain Controllers Azure

Products: Azure, Entra Id, Azure Cloud Shell, Azure Portal, Azure Virtual Machines

Roles: Administrator, Solution Architect, Technology Manager

Level: Intermediate

Subjects: Identity Access, Virtual Machine

Duration: 148 minutes

This learning path deals with securing your Azure resources. After completing the learning path, you’ll be able to determine if your Azure IaaS workloads have any security vulnerabilities, and remediate those potential security vulnerabilities.

Modules in this learning path:

• Audit Security of Windows Server Iaas Vms
• Manage Azure Updates
• Configure Bitlocker Disk Encryption for Windows Iaas Vms
• Implement Change Tracking File Integrity Monitoring for Windows Iaas Vms
• Implement Windows Server Iaas Vm Network Security

Products: Azure, Azure Cloud Shell, Azure Monitor, Azure Portal, Azure Virtual Machines

Roles: Administrator, Solution Architect, Technology Manager

Level: Intermediate

Subjects: Security

Duration: 231 minutes

Learn how to implement network security for Windows Server IaaS VMs using network security groups (NSGs), Azure Firewall, Windows Defender Firewall, and Azure Network Watcher for traffic capture and flow logging.

Units in this learning path:

• Introduction
• Groups Windows Iaas Vms
• Azure Firewall Windows Iaas Vms
• Windows Firewall Windows Iaas Vms
• Choose Appropriate Filtering Solution
• Deploy Configure Azure Firewall Using Azure Portal
• Capture Network Traffic with Network Watcher
• Log Network Traffic Using Azure Portal
• Knowledge Check
• Summary

Products: Azure, Azure Cloud Shell, Azure Portal, Azure Virtual Machines

Roles: Administrator, Solution Architect, Technology Manager

Level: Intermediate

Subjects: Cloud Security, Virtual Machine

Duration: 64 minutes

This learning path addresses problems related to managing, monitoring, and securing a hybrid environment. After completing the learning path, you’ll be able to manage and maintain hybrid Azure and on-premises workloads.

Modules in this learning path:

• Manage Hybrid Workloads with Azure Arc
• Monitor Windows Server Iaas Vms Hybrid Instances
• Audit Security of Windows Server Iaas Vms
• Manage Azure Updates

Products: Azure, Azure Cloud Shell, Azure Monitor, Azure Portal

Roles: Administrator, Solution Architect, Technology Manager

Level: Intermediate

Subjects: Security

Duration: 172 minutes

Implement Windows security enhancements with Microsoft Defender for Endpoint

Units in this learning path:

• Introduction
• Understand Attack Surface Reduction
• Enable Attack Surface Reduction Rules
• Knowledge Check
• Summary Resources

Products: Defender Xdr, Windows, Defender Endpoint

Roles: Security Operations Analyst

Level: Intermediate

Subjects: Cloud Security, Compliance, Security, Threat Protection

Duration: 31 minutes

This credential earner has the advanced competencies to implement a zero trust security architecture based on insights gathered from a simulated stakeholder interview. The earner has knowledge of modeling a zero trust framework and the practical strategies to enhance organizational security. The earner has developed transferable employability skills and gained real industry experience in a project-based learning opportunity.

Implement a secure environment for a database service

Modules in this learning path:

• Configure Database Authentication Authorization
• Protect Data Transit at Rest
• Implement Compliance Controls for Sensitive Data

Products: Azure, Azure SQL Database, SQL Server

Roles: Data Analyst, Data Engineer, Database Administrator

Level: Intermediate

Subjects: Security

Duration: 238 minutes