Explore digital courses

Explore how to use built-in Azure roles, managed identities, and RBAC-policy to control access to Azure resources. Identity is the key to secure solutions.

Units in this learning path:

• Introduction
• Assign Azure Roles
• Configure Custom Azure Roles
• Create Configure Managed Identities
• Access Managed Identities
• Analyze Azure Role Permissions
• Configure Azure Key Vault Rbac Policies
• Retrieve Objects from Azure Key Vault
• Knowledge Check
• Summary Resources

Products: Azure, Entra, Entra Id

Roles: Administrator, Identity Access Admin, Security Engineer

Level: Advanced

Subjects: Identity Access, Infrastructure, Security

Duration: 30 minutes

Implement access management for apps

Modules in this learning path:

• Plan Design Integration of Enterprise Apps for Sso
• Implement Monitor Integration of Enterprise Apps for Sso
• Implement App Registration
• Register Apps Use Microsoft Entra Id

Products: Azure, Entra, Entra Id

Roles: Administrator, Security Engineer

Level: Intermediate

Subjects: Identity Access

Duration: 154 minutes

Build a complete event collection and response architecture in Microsoft Sentinel. Set up and secure a Microsoft Sentinel workspace, deploy Content Hub solutions, connect Azure resource data, collect Linux and Windows security events with data collection rules, implement automated response workflows with Logic Apps playbooks, and manage data retention for compliance.

Modules in this learning path:

• Create Manage Azure Sentinel Workspaces
• Manage Content Microsoft Sentinel
• Connect Microsoft Services to Azure Sentinel
• Connect Syslog Data Sources to Azure Sentinel
• Connect Common Event Format Cef Logs to Azure Sentinel
• Connect Windows Hosts to Azure Sentinel
• Implement Automation Rules Playbooks Sentinel
• Manage Data Storage Audit Logs Sentinel

Products: Microsoft Sentinel, Defender Xdr, Azure Log Analytics, Azure Monitor

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 218 minutes

Implement an authentication and access management solution

Modules in this learning path:

• Secure Aad Users with Mfa
• Manage User Authentication
• Plan Implement Administer Conditional Access
• Manage Azure Ad Identity Protection
• Implement Access Management for Azure Resources
• Deploy Configure Microsoft Entra Global Secure Access

Products: Azure, Entra, Entra Id

Roles: Administrator, Security Engineer

Level: Intermediate

Subjects: Identity Access

Duration: 298 minutes

Implement an identity management solution using Microsoft Entra ID

Modules in this learning path:

• Implement Initial Configuration of Azure Active Directory
• Create Configure Manage Identities
• Implement Manage External Identities
• Implement Manage Hybrid Identity

Products: Azure, Entra Id, Entra External Id, Entra, Entra Workload Identities

Roles: Administrator, Identity Access Admin, Security Engineer

Level: Intermediate

Subjects: Identity Access

Duration: 256 minutes

Implement Just-in-Time privileged access using Privileged Identity Management (PIM) to reduce standing privilege across Microsoft Entra roles, Azure resources, and group-based access used by AI workloads and applications.

Units in this learning path:

• Introduction
• Explain Privileged Just in Time Access
• Explore Privileged Identity Features
• Implement Just in Time Entra Roles
• Implement Just in Time Azure Roles Resources
• Explore Privileged Access Groups
• Apply Privilege Workloads Agents Apps
• Review Design Patterns
• Knowledge Check
• Summary

Products: Entra, Entra Id

Roles: Security Engineer

Level: Intermediate, Advanced

Subjects: Identity Access, Security

Duration: 32 minutes

Implement and manage Microsoft 365 retention and recovery.

Units in this learning path:

• Introduction
• Plan Retention Disposition
• Create Publish Retention Label
• Auto Apply Retention Label
• Create Configure Adaptive Scope
• Create Configure Retention Policy
• Principles Retention
• Recover Content Microsoft 365 Workloads
• Knowledge Check
• Summary

Products: Microsoft Purview, M365

Roles: Risk Practitioner

Level: Intermediate

Subjects: Information Protection Governance

Duration: 55 minutes

Retention helps organizations meet compliance requirements and manage the lifecycle of data in Microsoft 365. This learning path shows how to configure retention labels and policies, apply them with adaptive scopes, and recover deleted content in Microsoft 365 workloads. It aligns with exam SC-401: Microsoft Information Security Administrator.

Modules in this learning path:

• Purview Understand Retention
• Purview Retention Recovery

Products: Microsoft Purview

Roles: Auditor, Administrator, Ip Admin

Level: Intermediate

Subjects: Security

Duration: 79 minutes

Organizations need to prevent data loss and safeguard sensitive information to meet security and compliance goals. Microsoft Purview provides DLP capabilities to detect and respond to risky activities across cloud and endpoint environments. Learn how to design, configure, and manage DLP policies using Microsoft Purview. This learning path aligns with exam SC-401: Microsoft Information Security Administrator.

Modules in this learning path:

• Purview Data Loss Prevention Understand Plan
• Purview Data Loss Prevention Create Manage Policies
• Purview Implement Endpoint Dlp
• Create Configure Data Loss Prevention Policies
• Purview Data Loss Prevention Alerts

Products: Microsoft Purview

Roles: Auditor, Administrator, Ip Admin

Level: Intermediate

Subjects: Security

Duration: 250 minutes

Implement Microsoft Purview Insider Risk Management to detect, investigate, and respond to internal risks while protecting data, ensuring compliance, and maintaining employee trust.

Modules in this learning path:

• Purview Explore Insider Risk Management
• Purview Prepare Insider Risk Management
• Purview Create Manage Insider Risk Policy
• Purview Insider Risk Investigate Alerts
• M365 Compliance Irm Adaptive Protection

Products: Microsoft Purview

Roles: Auditor, Administrator, Risk Practitioner

Level: Intermediate

Subjects: Security

Duration: 239 minutes

Inviting external users to use company Azure resources is a great benefit, but you want to do it in a secure way. Explore how to enable secure external collaboration.

Units in this learning path:

• Introduction
• Describe Guess Access Business to Business Accounts
• Collaboration
• Exercise Configure External Collaboration
• Invite External Users Individually Bulk
• Exercise Add Guest Users to Directory
• Exercise Invite Guest Users Bulk
• Demo Invite Guest Users to App
• User Accounts Azure Active Directory
• Manage Extern Users Microsoft 365 Workload
• Exercise Explore Dynamic Groups
• Implement Manager Entra Verified Id
• Configure Identity Providers
• Implement Cross Tenant Access Controls
• Knowledge Check
• Summary Resources

Products: Azure, Entra, Entra Verified Id, Entra External Id

Roles: Administrator, Identity Access Admin, Security Engineer

Level: Advanced

Subjects: Identity Access

Duration: 72 minutes

Creating a hybrid-identity solution to use your on-premises active directory can be challenging. Explore how to implement a secure hybrid-identity solution.

Units in this learning path:

• Introduction
• Plan Design Implement Azure Active Directory Connect
• Password Hash Synchronization
• Pass Through Authentication
• Demo Manage Pass Through Authentication Seamless Single Sign
• Federation
• Trouble Shoot Synchronization Errors
• Implement Azure Active Directory Connect Health
• Manage Azure Active Directory Connect Health
• Knowledge Check
• Summary Resources

Products: Azure, Entra, Entra External Id, Entra Id

Roles: Administrator, Identity Access Admin, Security Engineer

Level: Advanced

Subjects: Identity Access

Duration: 70 minutes