Explore digital courses

Learn how to use Zero Trust to secure endpoints to protect your organization and its users.

Units in this learning path:

• Introduction
• What Are Endpoints
• Protect Endpoints
• Knowledge Check
• Summary

Products: M365

Roles: Administrator, Student

Level: Beginner

Subjects: Security

Duration: 13 minutes

Secure enterprise and browser-based AI apps with Microsoft Purview

Units in this learning path:

• Introduction
• Understand AI Risks
• Assess AI Tool Usage
• Communication Compliance AI
• Insider Risk Management AI
• Data Loss Prevention AI
• Adaptive Protection AI
• Retention AI
• Knowledge Check
• Summary

Products: M365, Microsoft Purview

Roles: Administrator, Risk Practitioner, Security Operations Analyst, Auditor

Level: Intermediate

Subjects: Data Management, Threat Protection, Information Protection Governance, Compliance, Security, Insider Risk

Duration: 53 minutes

Learn how to deploy and manage Microsoft Tunnel Gateway to securely extend access to on-premises resources for enrolled and unenrolled mobile devices.

Units in this learning path:

• Introduction
• Configure Tunnel Gateway
• Extend Mobile Application Management Support
• Monitor Troubleshoot Tunnel
• Knowledge Check
• Summary

Products: M365, Windows, Intune

Roles: Administrator

Level: Intermediate

Duration: 41 minutes

Secure production multi-agent systems using Azure zero-trust architecture principles. Apply per-agent managed identities with least-privilege access and design authentication flows covering managed identity, on-behalf-of (OBO), user-delegated, and key-based patterns. Manage secrets lifecycle with Azure Key Vault, including rotation and customer-managed keys (CMK) encryption, and design network controls to prevent lateral movement. Implement multitenant data isolation and configure compliance controls for enterprise regulatory requirements.

Units in this learning path:

• Introduction
• Apply Zero Trust Identity Agent Networks
• Secure Agent Access Jit Workload Identity
• Design Authentication Flows Secrets Lifecycle
• Prevent Lateral Movement Agent Networks
• Implement Tenant Context Data Isolation
• Validate Tenant Boundaries Enforce Encryption
• Configure Compliance Controls
• Knowledge Check
• Summary

Products: Azure, Microsoft Foundry, Entra Id

Roles: AI Engineer, Solution Architect, Security Engineer

Level: Advanced

Subjects: Artificial Intelligence, Security

Duration: 71 minutes

Learn how Copilot+ PCs integrate hardware-backed security, Windows 11 Pro protections, and on-device AI processing to help organizations protect data, identities, and devices.

Units in this learning path:

• Introduction
• What Security Means on AI Pcs
• Secure and Productive by Design
• Enter Your Own Era of AI
• Protect Your Business Information
• Microsoft Copilot Enterprise Ready Design
• Control Data Privacy Access
• Knowledge Check
• Summary

Products: Windows 11

Roles: Business Owner, Business User, Administrator, Technology Manager

Level: Beginner

Duration: 17 minutes

Secure outbound internet connectivity for Azure VMware Solution using Azure Route Server, Azure Firewall, and third-party NVA

Units in this learning path:

• Introduction
• Outbound Internet Connectivity
• Exercise Configure Vmware Solution
• Exchange Routes with Avs
• Exercise Create Route Server
• Securing Network Communication
• Exercise Create Firewall
• Using Frrouting Nva
• Exercise Configure Custom Router
• Network Security Management
• Exercise Establish Outbound Internet
• Summary

Products: Azure Vmware Solution

Roles: Solution Architect, Security Engineer, Network Engineer

Level: Beginner, Intermediate

Duration: 80 minutes

Harden Azure remote and hybrid connectivity to reduce attack surface and enforce Zero Trust access principles. Assess VPN gateway security risks, apply hardening controls, and deploy Microsoft Entra Private Access to replace broad VPN access with identity-aware, per-application access.

Units in this learning path:

• Introduction
• Assess Security Risks Hybrid Connectivity
• Harden Vpn Gateway Security
• Replace Broad Vpn Access Entra Private Access
• Knowledge Check
• Summary

Products: Azure, Azure Vpn Gateway, Entra Id

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Networking

Duration: 39 minutes

Discover how to classify data, apply sensitivity labels, enforce DLP policies, and use Security Copilot to protect information across Microsoft 365.

Modules in this learning path:

• Purview Ninja Discover Define Sits
• Purview Ninja Label Sensitive Data
• Purview Ninja Security Copilot
• Purview Ninja Prevent Data Loss Share Transfer
• Purview Ninja Safeguard Remote Work

Products: Microsoft Purview, M365

Roles: Administrator

Level: Intermediate

Subjects: Security, Compliance

Duration: 117 minutes

Secure storage for Azure Files and Azure Blob Storage.

Modules in this learning path:

• Configure Blob Storage
• Configure Azure Files File Sync
• Configure Storage Security
• Guided Project Azure Files Azure Blobs

Products: Azure Blob Storage, Azure Files, Azure Storage Accounts

Roles: Administrator

Level: Intermediate

Duration: 214 minutes

Learn how Azure Storage provides multilayered security to protect your data with access keys, secure networks, and Advanced Threat Protection monitoring.

Units in this learning path:

• Introduction
• Storage Security Features
• Storage Account Keys
• Shared Access Signatures
• Control Network Access
• Advanced Threat Protection
• Adl Enterprise Security Features
• Summary

Products: Azure, Azure Storage

Roles: Administrator, Data Engineer, Security Engineer, Solution Architect

Level: Beginner

Subjects: Storage

Duration: 45 minutes

Learn how to use Azure role-based access control to effectively manage your team's access to Azure resources.

Units in this learning path:

• 1 Introduction
• 2 Rbac Overview
• 3 Knowledge Check Rbac Overview
• 4 List Access
• 5 Grant Access
• 6 View Activity Logs
• 7 Knowledge Check Rbac
• 8 Summary

Products: Azure, Azure Portal, Entra Id, Azure Rbac

Roles: Administrator, Solution Architect, Security Engineer

Level: Beginner

Subjects: Identity Access

Duration: 37 minutes

Microsoft Defender for Cloud Apps is a cloud access security broker (CASB) that operates on multiple clouds. It provides rich visibility, control over data travel, and sophisticated analytics to identify and combat cyberthreats across all your cloud services. Learn how to use Defender for Cloud Apps in your organization.

Units in this learning path:

• Introduction
• Framework
• Cloud Discovery
• Conditional Access App Control
• Walkthrough
• Classify Protect Sensitive Information
• Detect Threats
• Knowledge Check
• Summary

Products: M365, Defender For Cloud Apps

Roles: Administrator

Level: Beginner

Subjects: Cloud Security

Duration: 69 minutes