Course Overview

In this course students will gain the knowledge and skills needed to implement security controls, maintain the security posture, and identify and remediate vulnerabilities by using a variety of security tools. The course covers scripting and automation, virtualization, and cloud N-tier architecture.

Key Learning Areas

After completing this course, students will be able to:

  • Describe specialized data classifications on Azure
  • Identify Azure data protection mechanisms
  • Implement Azure data encryption methods
  • Secure Internet protocols and how to implement them on Azure
  • Describe Azure security services and features

Manage identity and access (20-25%)

Configure Microsoft Azure Active Directory for workloads

  • Create App registration
  • Configure App registration permission scopes
  • Manage App registration permission consent
  • Configure multi-factor authentication settings
  • Manage Microsoft Azure AD directory groups
  • Manage Microsoft Azure AD users
  • Install and configure Microsoft Azure AD Connect
  • Configure authentication methods
  • Implement conditional access policies
  • Configure Microsoft Azure AD identity protection


Configure Microsoft Azure AD Privileged Identity Management

  • Monitor privileged access
  • Configure access reviews
  • Activate Privileged Identity Management


Configure Microsoft Azure tenant security

  • Transfer Microsoft Azure subscriptions between Microsoft Azure AD tenants
  • Manage API access to Microsoft Azure subscriptions and resources

Course Outline

This certification track comes with the following benefits:

  • Digital Courseware
  • Practice Labs
  • 30-Day Azure Pass
  • Free Practice Exam
  • Free Exam Voucher
  • Mentoring


Identity and Access

  • Configure Azure Active Directory for Azure workloads and subscriptions
  • Configure Azure AD Privileged Identity Management
  • Configure security for an Azure subscription

Platform Protection

  • Understand cloud security
  • Build a network
  • Secure network
  • Implement host security
  • Implement platform security
  • Implement subscription security

Security Operations

  • Configure security services
  • Configure security policies by using Azure Security Center
  • Manage security alerts
  • Respond to and remediate security issues
  • Create security baselines

Data and Applications

  • Configure security policies to manage data
  • Configure security for data infrastructure
  • Configure encryption for data at rest
  • Understand application security
  • Implement security for application lifecycle
  • Secure applications
  • Configure and manage Azure Key Vault

Who Benefits

Students should have at least one year of hands-on experience securing Azure workloads and experience with security controls for workloads on Azure.

SATV Redemption

Redeeming your Microsoft Software Assurance Training Vouchers:

  • 5-Day SATV for a Classroom Live course
  • 5-Day SATV for a Virtual Classroom Live course


Before attending this course, students must have knowledge of:

  • AZ-103: Microsoft Azure Administrator Associate