Explore digital courses

Secure Microsoft Foundry environments by applying layered protections across identity, secrets, networks, and diagnostics. This module explains how to manage access with Microsoft Entra ID and project roles, protect credentials with Key Vault, and isolate workloads through private network connections. It also covers enabling diagnostic logging to strengthen visibility and auditing. These practices help you build trusted, compliant AI environments that support collaboration safely.

Units in this learning path:

• Introduction
• Control Access Azure AI Foundry
• Manage Access Foundry Projects
• Secure AI Foundry Secrets
• Isolate Foundry Network
• Enable Foundry Diagnostics
• Knowledge Check
• Summary

Products: Azure, Microsoft Foundry, Defender For Cloud

Roles: Security Engineer, Developer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 50 minutes

Secure Windows Server DNS

Units in this learning path:

• Introduction
• Implement Split Horizon Dns
• Create Dns Policies
• Implement Dns Policies
• Secure Windows Server Dns
• Implement Dnssec
• Knowledge Check
• Summary

Products: Windows Server

Roles: Administrator, Solution Architect, Technology Manager

Level: Intermediate

Subjects: Security

Duration: 58 minutes

Learn how to secure the Windows Server operating system and Active Directory Domain Services using security features, policies, and hardening techniques.

Modules in this learning path:

• Hardening Windows Server
• Manage Defender Endpoint
• Manage Defender Windows Client
• Manage Security Active Directory
• Secure Windows Server User Accounts
• Manage Security Controls Identity Access
• Security Monitoring and Governance

Products: Windows Server

Roles: Administrator

Level: Intermediate

Subjects: Security

Duration: 688 minutes

Protect your Active Directory environment by securing user accounts to least privilege and placing them in the Protected Users group. Learn how to limit authentication scope and remediate potentially insecure accounts.

Units in this learning path:

• Introduction
• Configure User Account Rights
• Protect Protected Users Group
• Describe Windows Defender Credential Guard
• Block Ntlm Authentication
• Locate Problematic Accounts
• Knowledge Check
• Summary

Products: Azure, Windows Server

Roles: Administrator

Level: Intermediate

Subjects: Identity Access

Duration: 38 minutes

Secure AI agent identities by applying Conditional Access policies through Microsoft Entra Agent Identity. Map authentication flows, configure CA policies scoped to agents, and control agent access and lifecycle events to reduce identity-based risk.

Units in this learning path:

• Introduction
• Authentication Flow Conditional Access
• Configure Agent Conditional Access Policy
• Control Agent Access Lifecycle
• Knowledge Check
• Summary

Products: Entra Id, Entra

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Identity Access

Duration: 23 minutes

Learn to design and implement strong authentication controls, apply Just-in-Time privileged access strategies, and extend identity-based security to AI-powered applications using Microsoft Entra.

Modules in this learning path:

• Manage Implement Authentication Methods
• Implement Configure Privileged Identity Management
• Copilot Declarative Agent API Plugin Auth

Products: Entra, Entra Id

Roles: Security Engineer

Level: Intermediate

Subjects: Identity Access, Security

Duration: 90 minutes

Microsoft 365 Copilot changes how users access, combine, and generate content across organizational data. Learn how Microsoft Purview helps you gain visibility into AI activity, protect sensitive information, detect risky behavior, and govern Microsoft 365 Copilot interactions.

Modules in this learning path:

• Purview AI Understand Risks
• Purview Audit Search Investigate
• M365 Compliance Information Protect Information
• Purview Data Loss Prevention Create Manage Policies
• Purview Create Manage Insider Risk Policy
• M365 Compliance Insider Prepare Communication Compliance
• Purview AI Secure Copilot

Products: Microsoft Purview, M365, Microsoft 365 Copilot

Roles: Auditor, Administrator, Ip Admin

Level: Intermediate

Subjects: Security, Compliance

Duration: 368 minutes

Row-level security (RLS) and Object-level security (OLS) allows you to create a single or a set of reports that targets data for a specific user. In this module, you'll learn how to implement RLS by using either a static or dynamic method and how Microsoft Power BI simplifies testing RLS in Power BI Desktop and Power BI service.

Units in this learning path:

• 1 Introduction
• 2 Static Method
• 3 Dynamic Method
• 3a Use Single Sign on for Directquery
• 3b Restrict Access to Power Bi Model Objects
• Lab
• 4 Check
• 5 Summary

Products: Power Bi, Power Platform

Roles: Data Analyst

Level: Intermediate

Subjects: Information Protection Governance

Duration: 39 minutes

Microsoft Purview provides tools to secure developer AI environments by discovering apps, assessing data access, and applying appropriate protections. This includes detecting generative AI usage, assigning user risk levels, and applying dynamic enforcement based on user behavior and data sensitivity.

Units in this learning path:

• Introduction
• Understand Developer AI Risks
• Discover Assess AI Apps
• Classify Protect Retain AI Prompt Data
• Azure AI Services Protections
• Entra AI Apps
• Secure Copilot Studio
• Manage Copilot Fabric Risks
• Investigate Respond AI Activity
• Knowledge Check
• Summary

Products: M365, Microsoft Purview, Entra, Microsoft Copilot Studio, Fabric, Foundry Tools

Roles: Administrator, Developer, Auditor

Level: Intermediate

Subjects: Security, Generative AI, Insider Risk, Compliance

Duration: 63 minutes

Defend email and collaboration workloads using Microsoft Defender for Office 365—configure threat protection policies, manage alerts, investigate and respond to threats, and run attack simulation training—and understand how it fits the broader Microsoft Defender security estate.

Units in this learning path:

• Introduction
• Preset Custom Policy Precedence
• Configure Threat Policy Settings
• Extend Protection Teams Sharepoint Onedrive
• Exercise Configure Scope Finance Team Protection
• Manage Alerts Investigate Threats
• Remediate Air Attack Simulation Training
• Exercise Investigate Threat Attack Simulation Training
• Broader Microsoft Defender Security Estate
• Knowledge Check
• Summary

Products: M365, M365 Admin Center

Roles: Administrator

Level: Intermediate

Subjects: Security

Duration: 89 minutes

Learn how to use Zero Trust to secure endpoints to protect your organization and its users.

Units in this learning path:

• Introduction
• What Are Endpoints
• Protect Endpoints
• Knowledge Check
• Summary

Products: M365

Roles: Administrator, Student

Level: Beginner

Subjects: Security

Duration: 13 minutes

Harden Azure remote and hybrid connectivity to reduce attack surface and enforce Zero Trust access principles. Assess VPN gateway security risks, apply hardening controls, and deploy Microsoft Entra Private Access to replace broad VPN access with identity-aware, per-application access.

Units in this learning path:

• Introduction
• Assess Security Risks Hybrid Connectivity
• Harden Vpn Gateway Security
• Replace Broad Vpn Access Entra Private Access
• Knowledge Check
• Summary

Products: Azure, Azure Vpn Gateway, Entra Id

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Networking

Duration: 39 minutes