Explore digital courses

Students will learn about the various types of device profiles, and how to create and manage them.

Units in this learning path:

• Introduction
• Explore Intune Device Profiles
• Create Device Profiles
• Create Custom Device Profile
• Knowledge Check
• Summary

Products: Mem, Configuration Manager, Intune, Windows

Roles: Administrator

Level: Intermediate

Subjects: Device Management, Identity Access

Duration: 15 minutes

Select and configure the right disk encryption approach for Azure virtual machines. Compare managed disk encryption options, configure encryption at host with customer-managed keys using Disk Encryption Sets, and apply confidential disk encryption to confidential virtual machines.

Units in this learning path:

• Introduction
• Choose Disk Encryption Option
• Configure Encryption at Host
• Apply Confidential Disk Encryption
• Knowledge Check
• Summary

Products: Azure Virtual Machines, Azure Key Vault, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 25 minutes

This course teaches how to govern AI platforms using Microsoft Entra and Azure Machine Learning, covering security groups, Conditional Access, managed identities, enterprise application integration, and audit logging to continuously monitor, enforce, and improve identity‑centric security for AI workloads.

Units in this learning path:

• Introduction
• Configure Microsoft Entra Security Groups
• Implement Conditional Access Policies Azure
• Integrate Enterprise Applications Azure
• Evaluate Security Posture Microsoft Entra
• Exercise Configure Secure Access Azure Machine
• Knowledge Check
• Summary

Products: Azure, Azure Rbac, Azure Policy, Azure Managed Applications, Azure Information Protection

Roles: Administrator, Data Scientist, Data Analyst, Database Administrator, Business Analyst

Level: Intermediate

Subjects: Security, Cloud Security, Information Protection Governance, Identity Access, Data Management

Duration: 73 minutes

Gain the skills to use Microsoft Purview to improve your data security in Microsoft 365. In this training, you learn how to create sensitive information types, create sensitivity labels, and use auto-labeling policies based on these labels. You also learn how to set up DLP (Data Loss Prevention) policies to safeguard your organization's data. (SC-5003)

Modules in this learning path:

• M365 Compliance Information Governance
• Create Manage Sensitive Information Types
• M365 Compliance Information Protect Information
• M365 Compliance Information Prevent Data Loss
• Purview Exercise Information Protection Data Loss Prevention

Products: Microsoft Purview, Office 365

Roles: Auditor

Level: Intermediate

Subjects: Information Protection Governance

Duration: 295 minutes

Learn to create an initial Azure Active Directory configuration to ensure all the identity solutions available in Azure are ready to use. This module explores how to build and configure an Azure AD system.

Units in this learning path:

• Introduction
• Configure Company Brand
• Configure Manage Roles
• Exercise Manage Users Roles
• Configure Delegation by Using Administrative Units
• Analyze Azure Ad Role Permissions
• Configure Manage Custom Domains
• Configure Tenant Wide Setting
• Exercise Setting Tenant Wide Properties
• Knowledge Check
• Summary Resources

Products: Azure

Roles: Administrator, Identity Access Admin, Security Engineer

Level: Advanced

Subjects: Identity Access

Duration: 50 minutes

Implement managed identities

Units in this learning path:

• Introduction
• Explore
• Discover Authentication Flow
• Configure
• Acquire Access Token
• Knowledge Check
• Summary

Products: Azure

Roles: Developer

Level: Intermediate

Subjects: Identity Access

Duration: 23 minutes

Implement defense-in-depth network security controls in Azure. Segment workloads to control lateral movement, centralize traffic inspection with Azure Firewall, harden remote and hybrid connectivity, and eliminate public network exposure of PaaS and AI services using private endpoints.

Modules in this learning path:

• Segment Isolate Workloads Network Security Controls
• Centralize Traffic Inspection Azure Firewall
• Secure Hybrid Connectivity Azure
• Eliminate Public Exposure Paas Private Link

Products: Azure, Azure Virtual Network, Azure Firewall, Azure Vpn Gateway, Azure Private Link, Entra Id

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security, Networking

Duration: 172 minutes

Privileged access management allows granular access control over privileged admin tasks in Office 365. Privileged access management requires users to request just-in-time access to complete elevated and privileged tasks through a highly scoped and time-bound approval workflow. This configuration gives users just-enough-access to perform the task at hand without risking exposure of sensitive data or critical configuration settings.

Units in this learning path:

• Introduction
• Understand Privileged Access Management
• Configure Privileged Access Management
• Manage Privileged Access Management
• Case Study
• Knowledge Check
• Summary

Products: M365, Office 365

Roles: Administrator

Level: Intermediate

Subjects: Identity Access, Data Management

Duration: 44 minutes

Learn how to secure resources using policy, role-based access control, and other Azure services

Modules in this learning path:

• Control and Organize with Resource Manager
• Secure Azure Resources with Rbac

Products: Azure, Azure Clis, Azure Portal, Azure Resource Manager, Azure Blueprints, Azure Policy, Azure Rbac

Roles: Solution Architect, Administrator, Security Engineer

Level: Beginner, Intermediate

Subjects: Security

Duration: 83 minutes

Finance and operations apps use role-based security to assign access to components in the system. A user who is assigned to a security role has access to the set of privileges that is associated with that role.

Units in this learning path:

• 1 Introduction
• 2 Duties Privileges
• 3 Perm Policy
• 4 Xds
• 5 Security
• 6 Exercise
• Entra Id Oauth
• 7 Check
• 8 Summary

Products: Dynamics 365, Dynamics Finance, Dynamics Scm

Roles: Developer, Solution Architect

Level: Intermediate

Subjects: Identity Access

Duration: 75 minutes

This course explains how to design secure AI platforms using Microsoft Foundry, applying centralized governance, managed identities, private networking, Azure OpenAI security controls, and container image protection to ensure compliant, production‑ready AI workloads across enterprise environments.

Units in this learning path:

• Introduction
• Understand Microsoft Foundry Security Architecture
• Secure Azure Openai Cognitive Services
• Secure AI Container Images Azure Container
• Exercise Configure Secure AI Infrastructure
• Knowledge Check
• Summary

Products: Azure, Azure Openai, Azure Container Registry, Microsoft Foundry, Azure Machine Learning

Roles: Security Engineer, Administrator, Database Administrator, Data Scientist, Security Operations Analyst

Level: Intermediate

Subjects: Security, Cloud Security, Infrastructure, Information Protection Governance, Artificial Intelligence

Duration: 61 minutes

Learn how to more securely deploy apps in Azure by using Azure Key Vault, managed identities, and Azure App Configuration.

Modules in this learning path:

• Implement Azure Key Vault
• Implement Managed Identities
• Implement Azure App Configuration

Products: Azure, Azure App Configuration, Azure Key Vault, Azure Rbac

Roles: Developer

Level: Intermediate

Subjects: Cloud Security

Duration: 107 minutes