Explore digital courses

Secure software development means integrating security into each phase of your development lifecycle, from requirements analysis to maintenance. Microsoft provides many services that can help you develop more secure code and deploy a more secure application in the cloud. This learning path provides an overview of the services and offerings available to help you build secure software as part of a cybersecurity solution.The deadline for agencies to comply with NIST/CISA/OMB guidance on security measures for critical software (including applying practices of least privilege, network segmentation, and proper configuration), per section 4 of the Executive Order on Improving the Nation's Cybersecurity, is **August 10, 2021**. The deadline for agencies to comply with the guidance identifying practices that enhance the security of the software supply chain with respect to software procurement, also per section 4, is **March 8, 2022**.

Modules in this learning path:

• Azure Well Architected Security
• Introduction to Github
• Maintain Secure Repository Github

Products: M365, Azure

Roles: Administrator, Security Operations Analyst, Security Engineer

Level: Beginner

Subjects: Threat Protection

Duration: 194 minutes

Multifactor authentication helps secure your environment and resources by requiring that your users confirm their identity by using multiple authentication methods, like a phone call, text message, mobile app notification, or one-time password. You can use multifactor authentication both on-premises and in the cloud to add security for accessing Microsoft online services, remote access applications, and more. This learning path provides an overview of how to use multifactor authentication as part of a cybersecurity solution.The deadline for agencies to adopt multifactor authentication and encryption at rest and in transit to the maximum extent (and report on progress every 60 days), per Section 3 of the Executive Order on Improving the Nation's Cybersecurity, is **November 8, 2021**.

Modules in this learning path:

• Secure Aad Users with Mfa
• Audit Identity Access Management
• Implement Manage Hybrid Identity

Products: M365, Azure

Roles: Administrator, Security Operations Analyst, Security Engineer

Level: Beginner

Subjects: Security

Duration: 137 minutes

MD-100 Configure threat protection

Modules in this learning path:

• Explore Malware Threat Protection
• Explore Microsoft Defender
• Explore Device Encryption Features
• Explore Connection Security Rules
• Explore Advanced Protection Methods

Products: Windows

Roles: Administrator

Level: Beginner

Subjects: Threat Protection

Duration: 102 minutes

MD-100 Troubleshoot the Windows client operating system and apps

Modules in this learning path:

• Employ File Recovery Windows Client
• Explore Application Troubleshooting
• Troubleshoot Windows Startup
• Troubleshoot Operating System Service Issues

Products: Windows

Roles: Administrator

Level: Beginner

Subjects: Device Management, Threat Protection

Duration: 105 minutes

MD-101 Configure user and device profiles

Modules in this learning path:

• Implement Device Profiles
• Monitor Device Profiles
• Manage User Profiles

Products: Configuration Manager, Intune, Windows

Roles: Administrator

Level: Intermediate

Subjects: Device Management, Identity Access

Duration: 54 minutes

MD-101 Manage Windows client security

Modules in this learning path:

• Implement Device Data Protection
• Manage Microsoft Defender Endpoint
• Manage Microsoft Defender Windows Client

Products: Configuration Manager, Intune, Windows

Roles: Administrator

Level: Intermediate

Subjects: Cloud Security, Data Management, Threat Protection

Duration: 71 minutes

This learning path explores Intune device profiles, the benefits of user profiles and how to synchronize profile data across multiple devices.

Modules in this learning path:

• Execute Device Profiles
• Oversee Device Profiles
• Maintain User Profiles

Products: Windows, Configuration Manager, Intune

Roles: Administrator

Level: Intermediate

Subjects: Device Management, Identity Access

Duration: 63 minutes

MS-900 Introduction to Microsoft 365: Describe Microsoft 365 security and compliance capabilities

Modules in this learning path:

• Explore Basic Services Identity Types of Azure Active Directory Azure Ad
• Explore Access Management Capabilities of Azure Ad
• Describe Threat Protection with Microsoft 365 Defender
• Describe Purview Risk Compliance Governance
• Describe Compliance Management Capabilities Microsoft

Products: M365

Roles: Business Owner, Business User

Level: Beginner

Subjects: Cloud Security, Compliance, Threat Protection

Duration: 256 minutes

Students learn about the benefits of various Windows user profiles, how to manage them, and how to facilitate profile data synchronization across multiple devices.

Units in this learning path:

• Introduction
• Examine User Profile
• Explore User Profile Types
• Examine Options Minimizing User Profile Size
• Deploy Configure Folder Redirection
• Sync User State Enterprise State Roaming
• Configure Enterprise State Roaming Azure
• Knowledge Check
• Summary

Products: Windows, Configuration Manager, Intune

Roles: Administrator

Level: Intermediate

Subjects: Identity Access, Storage

Duration: 27 minutes

Customer Lockbox supports requests to access data in Exchange Online, SharePoint Online, and OneDrive when Microsoft engineers need to access customer content to determine root cause and fix an issue. Customer Lockbox requires the engineer to request access from the customer as a final step in the approval workflow. This gives organizations the option to approve or deny these requests and provide direct-access control to the customer.

Units in this learning path:

• Introduction
• Understand Customer Lockbox
• Configure Customer Lockbox
• Manage
• Knowledge Check
• Summary

Products: M365, Office 365

Roles: Administrator

Level: Intermediate

Subjects: It Management Monitoring, Identity Access, Compliance

Duration: 22 minutes

This module explains the built-in security features of Windows clients and how to implement them using policies.

Units in this learning path:

• Introduction
• Explore Windows Security Center
• Explore Windows Defender Credential Guard
• Manage Microsoft Defender Antivirus
• Manage Windows Defender Firewall
• Explore Windows Defender Firewall Advanced Security
• Knowledge Check
• Summary

Products: Mem, Configuration Manager, Intune, Windows

Roles: Administrator

Level: Intermediate

Subjects: Cloud Security, Networking, Threat Protection

Duration: 23 minutes

Protecting a user's identity by monitoring their usage and sign-in patterns ensures a secure cloud solution. Explore how to design and implement Microsoft Entra Identity protection.

Units in this learning path:

• Introduction
• Review Identity Protection Basics
• Implement Manage User Risk Policy
• Enable Sign in Risk Policy
• Implement Manage Sign Risk Policies
• Monitor Investigate Remediate Elevated Risky Users
• Implement Security Workload Identities
• Explore Microsoft Defender Identity
• Identity Risk Management Agent
• Knowledge Check
• Summary Resources

Products: Azure, Entra, Entra Id, Entra Id Protection

Roles: Administrator, Identity Access Admin, Security Engineer

Level: Advanced

Subjects: Identity Access

Duration: 55 minutes