Explore digital courses

Implement security controls for Azure Kubernetes Service. Configure Microsoft Entra integration and Kubernetes RBAC for API server authentication and authorization, enforce network policies and private cluster access. Then apply workload identity and pod security standards to harden containerized workloads in Azure Kubernetes Service (AKS).

Units in this learning path:

• Introduction
• Control Kubernetes Cluster Access Entra
• Secure Kubernetes Network Access
• Implement Workload Identity Secrets Management
• Enforce Pod Container Security
• Knowledge Check
• Summary

Products: Azure, Azure Kubernetes Service, Defender For Cloud

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security, Containers

Duration: 31 minutes

Embed security controls into infrastructure as code pipelines to prevent noncompliant Azure resources from reaching production. Integrate IaC security scanning using Microsoft Defender for DevOps and the MSDO extension, and configure Azure Policy in a policy-as-code workflow to enforce security compliance at deployment time.

Units in this learning path:

• Introduction
• Scan Iac Templates Defender Devops
• Enforce Policy Compliance Iac Deployments
• Knowledge Check
• Summary

Products: Defender For Cloud, Azure Policy, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security, Devops

Duration: 23 minutes

Implement a defense-in-depth security strategy for AI workloads across Microsoft's AI platform. Configure data security posture management in Microsoft Purview, secure agent identities in Microsoft Entra, and analyze AI identity risks in Microsoft Defender XDR. Then, enable real-time agent protection in Microsoft Defender, configure AI Gateway security in Microsoft Foundry, manage guardrails, protect AI workloads with Defender for Cloud, and govern agents with Microsoft Agent 365.

Modules in this learning path:

• Secure Access Entra Agent Identity
• Analyze AI Identity Risks Defender Xdr
• Enable Realtime Protection Copilot Studio Agents
• Configure AI Gateway Security Foundry
• Azure AI Foundry Configure Manage Guardrails
• Defender for Cloud AI Protect Workloads
• Implement Defender Cloud AI Services
• Manage Agents Microsoft Agent 365
• Identify AI Data Risks Purview

Products: Microsoft Purview, Entra Id, Defender Xdr, Defender For Cloud Apps, Microsoft Foundry, Defender For Cloud, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security, Artificial Intelligence

Duration: 239 minutes

Implement end-to-end security for Azure SQL Database and SQL Managed Instance. Configure Entra ID authentication with managed identity access, deploy private endpoints, and apply encryption and access controls to protect sensitive financial data. Establish compliant audit trails and enable Microsoft Defender for Databases to detect SQL injection, anomalous access, and vulnerability exposures.

Modules in this learning path:

• Configure Azure SQL Platform Security
• Configure Azure SQL Auditing
• Implement Defender Databases

Products: Azure, Azure SQL Database, Azure SQL Managed Instance, Microsoft Defender

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security, Databases

Duration: 62 minutes

Implement a defense-in-depth security strategy for Azure Storage. Harden storage accounts, govern access with Microsoft Entra ID and stored access policies, enforce network perimeter controls using firewall rules and private endpoints, and enable Microsoft Defender for Storage to detect threats from malicious uploads and compromised AI agent credentials.

Modules in this learning path:

• Describe Azure Storage Services
• Implement Storage Account Security
• Configure Network Security Azure Storage
• Implement Defender Storage

Products: Azure, Azure Storage, Azure Blob Storage, Azure Files, Defender For Cloud

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 100 minutes

Learn about different security capabilities for Microsoft Teams, including Conditional Access, multifactor authentication, Safe Attachments, Safe Links, and Defender for Cloud Apps.

Units in this learning path:

• Introduction
• Configure Conditional Access Multifactor Authentication
• Configure Safe Attachments
• Configure Safe Links
• Examine Defender Cloud App
• Monitor Security Reports
• Enhanced Encryption Policies
• Knowledge Check
• Summary

Products: M365, Office Teams

Roles: Administrator

Level: Intermediate

Subjects: Collaboration, Security

Duration: 40 minutes

Implement layered security controls across Azure virtual machines and Arc-enabled hybrid servers. Configure disk encryption, Trusted Launch, Azure Bastion, Microsoft Defender for Servers, just-in-time VM access, and Azure Machine Configuration to close security gaps across your server estate.

Modules in this learning path:

• Implement Disk Encryption Azure Virtual Machines
• Configure Trusted Launch Azure Virtual Machines
• Plan Implement Azure Bastion
• Manage Security Azure Arc Servers
• Implement Microsoft Defender Servers
• Enable Enforce Just in Time Vm Access
• Enforce Vm Security Machine Configuration

Products: Azure Virtual Machines, Defender For Cloud, Azure Bastion, Azure Arc, Azure Key Vault, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 177 minutes

We will learn the different security models that Azure Cosmos DB uses.

Units in this learning path:

• Introduction
• Implement Network Level Access Control
• Review Data Encryption Options
• Use Role Based Access Control Rbac
• Access Account Resources Using Aad
• Understand Always Encrypted
• Exercise Store Account Keys Azure Key Vault
• Knowledge Check
• Summary

Products: Azure Cosmos Db

Roles: Developer

Level: Intermediate

Subjects: Security

Duration: 60 minutes

Implement security through a pipeline using Azure DevOps. (AZ-2001)

Modules in this learning path:

• Configure Project Repository Structure Support Secure Pipelines
• Configure Secure Access Pipeline Resources
• Manage Identity Projects Pipelines Agents
• Configure Validate Permissions
• Extend Pipeline Use Multiple Templates
• Configure Secure Access Azure Repos from Pipelines
• Configure Pipelines Securely Use Variables Parameters

Products: Azure, Azure Artifacts, Azure Cloud Services, Azure Devops, Azure Pipelines, Azure Repos

Roles: Administrator, Developer, Devops Engineer, Security Engineer, Security Operations Analyst, Solution Architect, Student, Support Engineer

Level: Intermediate

Subjects: Devops, Cloud Computing, Cloud Security, Key Management, Information Protection Governance, Identity Access, Compliance

Duration: 438 minutes

This module examines the process for implementing sensitivity labels, including applying proper administrative permissions, determining a deployment strategy, creating, configuring, and publishing labels, and removing and deleting labels.

Units in this learning path:

• Introduction
• Plan Deployment Strategy Sensitivity Labels
• Enable Sensitivity Labels Sharepoint Onedrive
• Examine Requirements Sensitivity Label
• Create Sensitivity Labels
• Publish Sensitivity Labels
• Remove Sensitivity Labels
• Knowledge Check
• Summary

Products: M365, Office 365

Roles: Administrator, Solution Architect, Technology Manager

Level: Intermediate

Subjects: Business Applications, Compliance, Identity Access, Insider Risk, It Management Monitoring, Productivity, Security, Threat Protection

Duration: 45 minutes

Implement shared access signatures

Units in this learning path:

• Introduction
• Discover
• Choose When to Use
• Explore Stored Access Policies
• Knowledge Check
• Summary

Products: Azure

Roles: Developer

Level: Intermediate

Subjects: Identity Access

Duration: 18 minutes

Implement the spec-driven development methodology using GitHub Spec Kit and GitHub Copilot in Visual Studio Code. Training covers a brownfield scenario for enterprise developers, emphasizing intent-first philosophy with living specifications.

Units in this learning path:

• Introduction
• Review Spec Driven Development Approach
• Examine Github Spec Kit
• Establish Project Principles Constitution File
• Write Effective Spec File
• Create Technical Plan File
• Generate Implementation Tasks File
• Examine Github Spec Kit Development Environment
• Exercise Implement Product Feature Github Spec Kit
• Scale Spec Driven Development Team Collaboration
• Integrate Spec Kit Advanced Deployment
• Knowledge Check
• Summary

Products: Github, Vs Code

Roles: Developer

Level: Intermediate

Subjects: App Development, Productivity

Duration: 180 minutes