Explore digital courses

Learn how to secure and harden Internet Information Services (IIS) to protect your web applications and data from potential threats. This module covers best practices for authentication, authorization, server and website hardening, certificate configuration, and more.

Units in this learning path:

• Introduction
• Authenticate Authorize
• Server Website Harden
• Certificate Configuration
• Knowledge Check
• Summary

Products: Windows Server

Roles: Administrator

Level: Intermediate

Duration: 71 minutes

Learn how Microsoft Surface devices are designed with security at every layer, from hardware to firmware to software, providing robust protection for your data and privacy.

Units in this learning path:

• Introduction
• Built Secure
• Trusted at Every Layer
• Built in Security Features
• Provide Ultimate Control
• Knowledge Check
• Summary

Products: Surface

Roles: Administrator, Business Leader, Business Owner, Business User, Technology Manager

Level: Beginner

Duration: 27 minutes

Learn how to secure Azure OpenAI in Microsoft Foundry by using Microsoft Entra ID authentication, managed identities, least-privilege Foundry RBAC roles, and local authentication controls.

Units in this learning path:

• Introduction
• Methods of Authentication Supported by Azure Open AI
• Configuring Rbac for Azure Open AI Identities
• Knowledge Check
• Summary

Products: Azure

Roles: Developer

Level: Beginner

Duration: 23 minutes

Implement workspace roles, item permissions, and OneLake security roles to control data access in Microsoft Fabric.

Units in this learning path:

• Introduction
• Understand Fabric Security Model
• Configure Workspace and Item Permissions
• Apply Granular Permissions
• Exercise
• Knowledge Check
• Summary

Products: Fabric

Roles: Data Analyst, Data Engineer

Level: Beginner

Subjects: Data Engineering, Data Analytics

Duration: 70 minutes

Row-level security (RLS) and Object-level security (OLS) allows you to create a single or a set of reports that targets data for a specific user. In this module, you'll learn how to implement RLS by using either a static or dynamic method and how Microsoft Power BI simplifies testing RLS in Power BI Desktop and Power BI service.

Units in this learning path:

• 1 Introduction
• 2 Static Method
• 3 Dynamic Method
• 3a Use Single Sign on for Directquery
• 3b Restrict Access to Power Bi Model Objects
• Lab
• 4 Check
• 5 Summary

Products: Power Bi, Power Platform

Roles: Data Analyst

Level: Intermediate

Subjects: Information Protection Governance

Duration: 39 minutes

Microsoft Purview provides tools to secure developer AI environments by discovering apps, assessing data access, and applying appropriate protections. This includes detecting generative AI usage, assigning user risk levels, and applying dynamic enforcement based on user behavior and data sensitivity.

Units in this learning path:

• Introduction
• Understand Developer AI Risks
• Discover Assess AI Apps
• Classify Protect Retain AI Prompt Data
• Azure AI Services Protections
• Entra AI Apps
• Secure Copilot Studio
• Manage Copilot Fabric Risks
• Investigate Respond AI Activity
• Knowledge Check
• Summary

Products: M365, Microsoft Purview, Entra, Microsoft Copilot Studio, Fabric, Foundry Tools

Roles: Administrator, Developer, Auditor

Level: Intermediate

Subjects: Security, Generative AI, Insider Risk, Compliance

Duration: 63 minutes

Defend email and collaboration workloads using Microsoft Defender for Office 365—configure threat protection policies, manage alerts, investigate and respond to threats, and run attack simulation training—and understand how it fits the broader Microsoft Defender security estate.

Units in this learning path:

• Introduction
• Preset Custom Policy Precedence
• Configure Threat Policy Settings
• Extend Protection Teams Sharepoint Onedrive
• Exercise Configure Scope Finance Team Protection
• Manage Alerts Investigate Threats
• Remediate Air Attack Simulation Training
• Exercise Investigate Threat Attack Simulation Training
• Broader Microsoft Defender Security Estate
• Knowledge Check
• Summary

Products: M365, M365 Admin Center

Roles: Administrator

Level: Intermediate

Subjects: Security

Duration: 64 minutes

Learn how to use Zero Trust to secure endpoints to protect your organization and its users.

Units in this learning path:

• Introduction
• What Are Endpoints
• Protect Endpoints
• Knowledge Check
• Summary

Products: M365

Roles: Administrator, Student

Level: Beginner

Subjects: Security

Duration: 13 minutes

Secure enterprise and browser-based AI apps with Microsoft Purview

Units in this learning path:

• Introduction
• Understand AI Risks
• Assess AI Tool Usage
• Communication Compliance AI
• Insider Risk Management AI
• Data Loss Prevention AI
• Adaptive Protection AI
• Retention AI
• Knowledge Check
• Summary

Products: M365, Microsoft Purview

Roles: Administrator, Risk Practitioner, Security Operations Analyst, Auditor

Level: Intermediate

Subjects: Data Management, Threat Protection, Information Protection Governance, Compliance, Security, Insider Risk

Duration: 53 minutes

Learn how to deploy and manage Microsoft Tunnel Gateway to securely extend access to on-premises resources for enrolled and unenrolled mobile devices.

Units in this learning path:

• Introduction
• Configure Tunnel Gateway
• Extend Mobile Application Management Support
• Monitor Troubleshoot Tunnel
• Knowledge Check
• Summary

Products: M365, Windows, Intune

Roles: Administrator

Level: Intermediate

Duration: 41 minutes

Secure production multi-agent systems using Azure zero-trust architecture principles. Apply per-agent managed identities with least-privilege access and design authentication flows covering managed identity, on-behalf-of (OBO), user-delegated, and key-based patterns. Manage secrets lifecycle with Azure Key Vault, including rotation and customer-managed keys (CMK) encryption, and design network controls to prevent lateral movement. Implement multitenant data isolation and configure compliance controls for enterprise regulatory requirements.

Units in this learning path:

• Introduction
• Apply Zero Trust Identity Agent Networks
• Secure Agent Access Jit Workload Identity
• Design Authentication Flows Secrets Lifecycle
• Prevent Lateral Movement Agent Networks
• Implement Tenant Context Data Isolation
• Validate Tenant Boundaries Enforce Encryption
• Configure Compliance Controls
• Knowledge Check
• Summary

Products: Azure, Microsoft Foundry, Entra Id

Roles: AI Engineer, Solution Architect, Security Engineer

Level: Advanced

Subjects: Artificial Intelligence, Security

Duration: 71 minutes

Learn how Copilot+ PCs integrate hardware-backed security, Windows 11 Pro protections, and on-device AI processing to help organizations protect data, identities, and devices.

Units in this learning path:

• Introduction
• What Security Means on AI Pcs
• Secure and Productive by Design
• Enter Your Own Era of AI
• Protect Your Business Information
• Microsoft Copilot Enterprise Ready Design
• Control Data Privacy Access
• Knowledge Check
• Summary

Products: Windows 11

Roles: Business Owner, Business User, Administrator, Technology Manager

Level: Beginner

Duration: 17 minutes