Explore digital courses

This module is designed to provide administrators with the knowledge and skills needed to plan and implement advanced security measures for Azure compute resources, safeguarding applications and data against evolving security threats.

Units in this learning path:

• Introduction
• Remote Access Public Endpoints Include Azure Bastion
• Azure Kubernetes Service Overview
• Best Practices Cluster Isolation Azure Kubernetes Service
• Microsoft Defender Containers
• Best Practices Authentication Authorization
• Monitor Container Resources Azure Container Instances
• Security Considerations Azure Container Instances
• Azure Container Registry Roles Permissions
• Azure Data Encryption
• Azure Security Baseline API Management
• Knowledge Check
• Summary

Products: Azure, Azure Disk Encryption, Azure Virtual Machines, Defender For Cloud, Microsoft Defender, Update Manager

Roles: Administrator, Security Engineer

Level: Intermediate

Subjects: Cloud Security

Duration: 82 minutes

Plan and implement an identity governance strategy

Modules in this learning path:

• Plan Implement Entitlement Management
• Plan Implement Manage Access Review
• Plan Implement Privileged Access
• Monitor Maintain Azure Active Directory

Products: Azure, Entra, Entra Identity Governance, Entra Id

Roles: Administrator, Security Engineer

Level: Intermediate

Subjects: Identity Access

Duration: 203 minutes

Plan and implement data platform resources

Modules in this learning path:

• Deploy Iaas Solutions with Azure SQL
• Deploy Paas Solutions with Azure SQL
• Migrate SQL Workloads Azure SQL Databases
• Migrate SQL Workloads Azure Managed Instances

Products: Azure, Azure SQL Database, SQL Server

Roles: Data Engineer, Database Administrator

Level: Intermediate

Subjects: Data Engineering, Data Management

Duration: 322 minutes

Covers enrollment strategy selection, step-by-step platform enrollment guidance for Windows, iOS/iPadOS, macOS, and Android, plus enrollment restrictions and troubleshooting.

Units in this learning path:

• Introduction
• Choose Enrollment Strategy
• Enroll Windows
• Enroll Ios
• Enroll Macos
• Enroll Android
• Enrollment Restrictions
• Troubleshoot Enrollment
• Knowledge Check
• Summary

Products: M365, Windows, Intune

Roles: Administrator

Level: Intermediate

Duration: 60 minutes

When new users or external users join your site, quickly assigning them access to Azure solutions is a must. Explore how to entitle users to access your site and resources.

Units in this learning path:

• Introduction
• Define Access Packages
• Create Manage Resource Catalog with Azure Ad Entitlement
• Plan Implement Manage Entitlements
• Implement Manage Terms of Use
• Manage Lifecycle of External Users with Azure Ad Identity Governance
• Configure Manage Connected Organizations
• Review Per User Entitlements
• Knowledge Checks
• Summary Resources

Products: Azure, Entra, Entra Identity Governance, Entra Id

Roles: Administrator, Identity Access Admin, Security Engineer

Level: Advanced

Subjects: Cloud Computing

Duration: 55 minutes

A legal entity is an organization that is identified through registration with a legal authority. Legal entities can enter into contracts and are required to prepare statements that report on their performance. You must plan and configure your organization and create legal entities as one of the first steps of implementing finance and operations apps.

Units in this learning path:

• 1 Plan Implement Legal Entities in F and O Introduction
• 2 Create a Legal Entity
• 3 Create Number Sequence
• 4 Organizational Hierarchies and Operating Units
• 6 Internal Organizations As Legal Entities Vs Operating Units
• 7 Internal Organizations As Legal Entities Vs Operating Units Cont
• 8 Best Practices Modeling Organizations and Hierarchies
• 9 Apply Purposes and Policies
• 10 Distributed Order Management Policy
• 11 Configure Calendars
• 13 Exercise Configure a New Legal Entity
• 14 Exercise Create an Operating Unit
• 15 Exercise Create an Organization Hierarchy
• 16 Exercise Set Up a Number Sequence
• 17 Plan Implement Legal Entities in F and O Quiz
• 18 Plan Implement Legal Entities in F and O Summary

Products: Dynamics 365, Dynamics Finance, Dynamics Scm

Roles: Functional Consultant

Level: Intermediate

Subjects: Finance Accounting, Business Applications

Duration: 113 minutes

Ensuring that administrative roles are protected and managed to increase your Azure solution security is a must. Explore how to use PIM to protect your data and resources.

Units in this learning path:

• Introduction
• Define Strategy for Administrative Users
• Configure Privileged Identity Management for Azure Resources
• Configure Privileged Identity Management for Azure Ad Roles
• Assign Azure Ad Roles Privileged Identity Management
• Assign Azure Resource Roles Privileged Identity Management
• Plan Configure Privileged Access Groups
• Analyze Privileged Identity Management Audit History Reports
• Create Manage Emergency Access Accounts
• Knowledge Check
• Summary Resources

Products: Azure, Entra, Entra Identity Governance, Entra Id

Roles: Administrator, Identity Access Admin, Security Engineer

Level: Advanced

Subjects: Identity Access

Duration: 62 minutes

This module is designed to empower administrators with the knowledge and skills needed to plan and implement robust security measures for Azure SQL Database and Azure SQL Managed Instance, ensuring data protection and regulatory compliance.

Units in this learning path:

• Introduction
• Azure SQL Database
• Authorize Database Access
• Database Audit
• Microsoft Purview Governance Portal Use Cases
• Implement Data Classification Sensitive Information
• Dynamic Data Mask
• Transparent Data Encryption
• Always Encrypted
• Implement an Azure SQL Database Firewall
• Knowledge Check
• Summary

Products: Azure, Azure SQL Database, Azure SQL Managed Instance

Roles: Administrator, Security Engineer

Level: Intermediate

Subjects: Security

Duration: 78 minutes

This module focuses on equipping administrators with the knowledge and skills required to plan and implement robust security measures for private access to Azure resources, safeguarding sensitive data and enhancing network integrity.

Units in this learning path:

• Introduction
• Virtual Network Service Endpoints
• Private Endpoints
• Azure Private Link Services
• Integrate Your App with Azure Virtual Network
• Network Security Configurations App Service Environment
• Network Security Configurations Azure SQL Managed Instance
• Knowledge Check
• Summary

Products: Azure App Service, Azure Functions, Azure Virtual Network

Roles: Administrator, Security Engineer

Level: Intermediate

Subjects: Security

Duration: 56 minutes

Plan and implement security for public access to Azure resources

Units in this learning path:

• Introduction
• Plan Implement Transport Layer Security
• Azure Firewall Azure Firewall Manager Firewall Policies
• Azure Application Gateway
• Azure Web Application Firewall
• Front Door Content Development Network
• Azure Distributed Denial of Service Protection
• Knowledge Check
• Summary

Products: Azure App Service, Azure Application Gateway, Azure Ddos Protection, Azure Firewall Manager, Azure Front Door, Azure Web Application Firewall

Roles: Administrator, Security Engineer

Level: Intermediate

Subjects: Security

Duration: 61 minutes

This module is designed to provide administrators with the knowledge and skills required to plan and implement comprehensive security measures for Azure storage resources, safeguarding data integrity, confidentiality, and availability.

Units in this learning path:

• Introduction
• Azure Storage
• Authorize Requests Azure Storage
• Manage Storage Account Access Keys
• Select Configure Access Azure Files
• Authorize Access Blobs Use Microsoft Entra Id
• Authorize Access Tables Use Microsoft Entra Id
• Authorize Access Queue Data Azure Portal
• Recommendations Basic Data Protection
• Bring Your Own Key Specification
• Enable Infrastructure Encryption Double Encryption Data
• Knowledge Check
• Summary

Products: Azure, Azure Blob Storage, Azure Disk Storage, Azure Files, Azure Storage, Azure Storage Accounts

Roles: Administrator, Security Engineer

Level: Intermediate

Subjects: Information Protection Governance

Duration: 89 minutes

This module is designed to provide administrators with the knowledge and skills needed to plan and implement robust security measures for Azure virtual networks, ensuring the confidentiality, integrity, and availability of network resources.

Units in this learning path:

• Introduction
• Data Protection Logging Threat Detection Network Security
• Azure Virtual Network
• Azure Virtual Network Manager
• Network Security Groups Application Security Groups
• User Defined Routes
• Virtual Network Peering Gateways
• Virtual Wide Area Network
• Secure Virtual Private Network Connectivity Point to Site Site to Site
• Azure Encryption
• What Is Azure Virtual Network Encryption
• Azure Expressroute
• Expressroute Encryption
• Azure Best Practices Network Security
• Monitor Network Security
• Knowledge Check
• Summary

Products: Azure, Azure Firewall, Azure Firewall Manager, Azure Virtual Network, Azure Vpn Gateway

Roles: Administrator, Security Engineer

Level: Intermediate

Subjects: Security

Duration: 117 minutes