Explore digital courses

Azure Database for PostgreSQL includes comprehensive security features including encryption in transit and at rest, authentication, and granting permissions to database users. In this module you learn about the security features of Azure Database for PostgreSQL, and how to configure them.

Units in this learning path:

• Introduction
• Describe Security
• Describe Built Server Roles
• Grant Permissions
• Understand Encryption
• Exercise Configure Permissions
• Knowledge Check
• Summary

Products: Azure Database Postgresql

Roles: Database Administrator

Level: Intermediate

Subjects: Databases

Duration: 45 minutes

Implement a defense-in-depth security strategy for Azure Key Vault. Configure hardened vault settings, control access through RBAC and just-in-time privilege, manage keys, secrets, and certificates, and detect threats using Microsoft Defender for Key Vault and Defender CSPM.

Modules in this learning path:

• Configure Secure Key Vault
• Manage Keys Secrets Key Vault
• Manage Certificates Monitor Key Vault
• Defend Key Vault Defender Cloud

Products: Azure Key Vault, Defender For Cloud, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 104 minutes

This module shows you how to secure Azure OpenAI workloads in Microsoft Foundry by using centralized governance, managed identities, private networking, content safety controls, and container image protection for compliant enterprise deployments.

Units in this learning path:

• Introduction
• Understand Azure AI Content Safety Architecture
• Configure Content Filters Custom Blocklists
• Exercise Deploy Content Safety Controls Azure
• Knowledge Check
• Summary

Products: Azure, Azure Openai, Azure Sdks, Microsoft Foundry

Roles: Security Engineer, Administrator, Database Administrator, Security Operations Analyst, Devops Engineer

Level: Intermediate

Subjects: Security, Cloud Security, Compliance, Information Protection Governance, Generative AI

Duration: 57 minutes

Implement security controls across Azure application platform services—from container workloads to the API layer. Configure Microsoft Defender for Containers, secure Azure Kubernetes Service (AKS), Azure Container Registry (ACR), Container Instances, and Container Apps. Then apply authentication, network access, and policy controls across Azure Function apps, Logic apps, App Services, Web Application Firewall, and Azure API Management.

Modules in this learning path:

• Detect Container Risks Defender Containers
• Implement Security Controls Aks
• Implement Security Controls Containers
• Implement Security Controls Function Logic Apps
• Implement Security Web Application Firewall
• Implement API Security API Management

Products: Azure, Defender For Cloud, Azure Kubernetes Service, Azure Container Registry, Azure Functions, Azure API Management

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security, Containers

Duration: 189 minutes

Explore network traffic filtering with Network Security Group, set up Microsoft Defender for Cloud, create a Log Analytics workspace, configure Log Analytics agent integration, Azure Key Vault networking, and connect an Azure SQL server using Azure Private Endpoint in the Azure portal. Enhance cloud security effectively. (SC-5002)

Modules in this learning path:

• Examine Defender Cloud Regulatory Compliance Standards
• Enable Defender Cloud Azure Subscription
• Filter Network Traffic Network Security Group Using Azure Portal
• Configure Integrate Analytics Agent Defender Cloud
• Just in Time Access
• Configure Azure Key Vault Networking Settings
• Connect Azure Server Private Endpoint Using Azure Portal

Products: Azure, Azure Key Vault, Azure Monitor, Azure Portal, Azure Private Link, Azure SQL Database, Azure SQL Virtual Machines, Azure Sqlserver Vm, Azure Storage, Azure Virtual Machines, Azure Virtual Network, Defender For Cloud

Roles: Administrator, Security Engineer

Level: Intermediate

Duration: 550 minutes

Learn how to secure Hyper-V workloads using guarded fabric, Host Guardian Service (HGS) with TPM-trusted and Host Key attestation, Key Protection Service, and shielded virtual machines with BitLocker-encrypted template disks.

Units in this learning path:

• Introduction
• Define Guarded Fabric
• Define Host Guardian Service
• Explore Tpm Trusted Attestation
• Define Kps
• Determine Key Features of Shielded Vms
• Compare Encryption Supported Shielded Vms Guarded Fabric
• Implement Shielded Vm
• Knowledge Check
• Summary

Products: Windows Server

Roles: Administrator, Security Engineer, Solution Architect

Level: Intermediate

Duration: 55 minutes

K-12 IT professionals implement CISA-recommended cybersecurity practices to manage risks, maintain security protocols, and detect and respond to incidents.

Units in this learning path:

• Introduction
• School Threats Vulnerabilities
• It Cyber Responsibilities
• Cyberthreats Education Zero Trust
• Vulnerability Risk Assessments
• Threat Management
• Access Control Authentication Models
• Data Loss Prevention
• Secure Network Design
• Incident Response Plans
• Investigation Management Response
• Disaster Recovery Planning
• Security Awareness Training
• Collaboration Information Sharing
• Partner Build Cybersecurity Network
• Knowledge Check
• Summary

Products: Azure, Windows

Roles: School Leader

Level: Intermediate

Duration: 106 minutes

AI tools like Microsoft 365 Copilot create new ways to interact with sensitive data, but they also introduce new risks. Learn how Microsoft Purview helps you apply security and compliance controls that protect data, manage AI activity, and support responsible use at scale.

Units in this learning path:

• Introduction
• Understand Copilot Protection Needs
• Compliance Manager Copilot
• Audit Copilot
• Communication Compliance Copilot
• Sensitivity Labels Copilot
• Data Loss Prevention Copilot
• Retention Copilot
• Ediscovery Copilot
• Knowledge Check
• Summary

Products: M365, Microsoft Purview, Microsoft 365 Copilot

Roles: Administrator, Auditor, Ip Admin, Risk Practitioner

Level: Intermediate

Subjects: Security, Compliance, Information Protection Governance

Duration: 54 minutes

Learn how to use multifactor authentication with Microsoft Entra ID to harden your user accounts.

Units in this learning path:

• Introduction
• Azure Multi Factor Authentication
• Planning Mfa
• Exercise Mfa
• Configure Authentication Methods
• Summary

Products: Azure, Azure Portal, Entra Id

Roles: Security Engineer, Administrator

Level: Beginner

Subjects: Identity Access

Duration: 38 minutes

Secure Microsoft Foundry environments by applying layered protections across identity, secrets, networks, and diagnostics. This module explains how to manage access with Microsoft Entra ID and project roles, protect credentials with Key Vault, and isolate workloads through private network connections. It also covers enabling diagnostic logging to strengthen visibility and auditing. These practices help you build trusted, compliant AI environments that support collaboration safely.

Units in this learning path:

• Introduction
• Control Access Azure AI Foundry
• Manage Access Foundry Projects
• Secure AI Foundry Secrets
• Isolate Foundry Network
• Enable Foundry Diagnostics
• Knowledge Check
• Summary

Products: Azure, Microsoft Foundry, Defender For Cloud

Roles: Security Engineer, Developer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 50 minutes

In this module, you learn about integrating Azure Identity Services with SAP RISE, implementing single sign-on, transitioning from SAP Identity Management to Microsoft Entra, using Microsoft Security Copilot and Microsoft Sentinel with SAP RISE.

Units in this learning path:

• Introduction
• Azure Identity Services Rise
• Microsoft Security Copilot Rise
• Microsoft Sentinel Security Rise
• Sentinel Solution Sap Logserv
• Sentinel Solution Sap Business Technology Platform Overview
• Automatic Response Sentinel Capability
• Azure Monitor Rise
• Knowledge Check
• Summary

Products: Azure Sap

Roles: Administrator, Devops Engineer

Level: Intermediate

Duration: 88 minutes

Learn how to implement security for Unity Catalog objects in Azure Databricks, including access control, fine-grained permissions, credential management, and authentication strategies.

Units in this learning path:

• Introduction
• Understand Query Lifecycle
• Implement Access Control Strategies
• Understand Fine Grained Access Control
• Implement Row Filtering Column Masking
• Access Azure Key Vault
• Authenticate Data Access Service Principals
• Authenticate Resource Access Managed Identities
• Exercise
• Knowledge Check
• Summary

Products: Azure Databricks

Roles: Data Engineer

Level: Intermediate

Subjects: Data Engineering

Duration: 107 minutes