Explore digital courses

Learn how to secure Windows Server DNS using split-horizon DNS, DNS policies for traffic management and geo-location routing, DNS cache locking, DNS socket pool, and DNSSEC for cryptographic zone signing.

Units in this learning path:

• Introduction
• Implement Split Horizon Dns
• Create Dns Policies
• Implement Dns Policies
• Secure Windows Server Dns
• Implement Dnssec
• Knowledge Check
• Summary

Products: Windows Server

Roles: Administrator, Solution Architect, Technology Manager

Level: Intermediate

Subjects: Security

Duration: 58 minutes

Learn how to secure the Windows Server operating system and Active Directory Domain Services using security features, policies, and hardening techniques.

Modules in this learning path:

• Hardening Windows Server
• Manage Defender Endpoint
• Manage Defender Windows Client
• Understand Active Directory Security Policies
• Manage Security Active Directory
• Understand Windows Server Service Accounts
• Secure Windows Server User Accounts
• Manage Security Controls Identity Access
• Security Monitoring and Governance

Products: Windows Server

Roles: Administrator

Level: Intermediate

Subjects: Security

Duration: 846 minutes

Secure Windows Server on-premises and hybrid infrastructures

Modules in this learning path:

• Implement Windows Server Iaas Vm Network Security
• Audit Security of Windows Server Iaas Vms
• Manage Azure Updates
• Configure Bitlocker Disk Encryption for Windows Iaas Vms
• Implement Change Tracking File Integrity Monitoring for Windows Iaas Vms
• Secure Windows Server Dns
• Secure Windows Server User Accounts
• Hardening Windows Server
• Windows Server Update Management

Products: Azure, Entra Id, Windows Server

Roles: Administrator, Solution Architect, Technology Manager

Level: Intermediate

Subjects: Infrastructure

Duration: 399 minutes

Learn how to secure Active Directory user accounts using least privilege, Protected Users group, authentication policy silos, Windows Defender Credential Guard, NTLM blocking, and account remediation techniques.

Units in this learning path:

• Introduction
• Configure User Account Rights
• Protect Protected Users Group
• Describe Windows Defender Credential Guard
• Block Ntlm Authentication
• Locate Problematic Accounts
• Knowledge Check
• Summary

Products: Azure, Windows Server

Roles: Administrator

Level: Intermediate

Subjects: Identity Access

Duration: 38 minutes

Learn the key concepts and strategies for protecting sensitive data in Microsoft Fabric data warehouses.

Units in this learning path:

• Introduction
• Explore Dynamic Data Masking
• Implement Row Level Security
• Implement Column Level Security
• Configure SQL Granular Permissions
• Exercise Secure Data Warehouse
• Knowledge Check
• Summary

Products: Fabric

Roles: Data Analyst, Data Engineer

Level: Beginner

Subjects: Data Engineering, Data Analytics

Duration: 74 minutes

Secure AI agent identities by applying Conditional Access policies through Microsoft Entra Agent Identity. Map authentication flows, configure CA policies scoped to agents, and control agent access and lifecycle events to reduce identity-based risk.

Units in this learning path:

• Introduction
• Authentication Flow Conditional Access
• Configure Agent Conditional Access Policy
• Control Agent Access Lifecycle
• Knowledge Check
• Summary

Products: Entra Id, Entra

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Identity Access

Duration: 23 minutes

Learn to design and implement strong authentication controls, apply Just-in-Time privileged access strategies, and extend identity-based security to AI-powered applications using Microsoft Entra.

Modules in this learning path:

• Manage Implement Authentication Methods
• Implement Configure Privileged Identity Management
• Copilot Declarative Agent API Plugin Auth

Products: Entra, Entra Id

Roles: Security Engineer

Level: Intermediate

Subjects: Identity Access, Security

Duration: 90 minutes

Secure an Azure Cosmos DB account with Microsoft Entra authentication, key rotation, scoped role assignments, network isolation, and dynamic data masking.

Units in this learning path:

• Introduction
• Implement Entra Authentication
• Configure Key Authentication Rotation
• Implement Rbac
• Configure Network Security
• Configure Dynamic Data Masking
• Exercise Secure Account
• Knowledge Check
• Summary

Products: Azure Cosmos Db

Roles: Developer

Level: Intermediate

Subjects: Cloud Computing, Databases

Duration: 98 minutes

Introduction to Microsoft security capabilities that can help keep your applications and data secure in your Azure Virtual Desktop deployment.

Units in this learning path:

• 1 Introduction
• 2 Enable Security
• 3 Enable Data Security
• 4 Secure Users
• 5 Secure Session Hosts
• 6 Secure Network Access
• 7 Exercise Secure Desktop
• 8 Knowledge Check
• 9 Summary

Products: M365, Azure, Azure Virtual Desktop

Roles: Administrator, Security Engineer, Solution Architect, Technology Manager

Level: Beginner

Subjects: Remote Hybrid Work, Cloud Computing

Duration: 56 minutes

Microsoft 365 Copilot changes how users access, combine, and generate content across organizational data. Learn how Microsoft Purview helps you gain visibility into AI activity, protect sensitive information, detect risky behavior, and govern Microsoft 365 Copilot interactions.

Modules in this learning path:

• Purview AI Understand Risks
• Purview Audit Search Investigate
• M365 Compliance Information Protect Information
• Purview Data Loss Prevention Create Manage Policies
• Purview Create Manage Insider Risk Policy
• M365 Compliance Insider Prepare Communication Compliance
• Purview AI Secure Copilot

Products: Microsoft Purview, M365, Microsoft 365 Copilot

Roles: Auditor, Administrator, Ip Admin

Level: Intermediate

Subjects: Security, Compliance

Duration: 368 minutes

Learn to implement comprehensive security and governance for your data assets in Azure Databricks using Unity Catalog. Master access control strategies, fine-grained permissions, credential management, and governance practices to build a secure and compliant data platform.

Modules in this learning path:

• Secure Unity Catalog Objects
• Govern Unity Catalog Objects

Products: Azure Databricks

Roles: Data Engineer

Level: Intermediate

Subjects: Data Engineering

Duration: 215 minutes

Implement layered access controls across Microsoft Fabric workspaces and data stores, then establish governance policies that help consumers identify trustworthy, certified analytics assets.

Modules in this learning path:

• Secure Data Access in Fabric
• Secure Data Warehouse in Microsoft Fabric
• Fabric Govern Analytics Data

Products: Fabric

Roles: Data Analyst, Data Engineer

Level: Intermediate

Subjects: Data Analytics, Data Management

Duration: 188 minutes