0%

Explore Courses Defend What Matters

Your Bag

Microsoft Azure Security

04 Cloud Security

Microsoft Azure Security

Protect Azure workloads and Entra ID, the identity plane that most enterprise attacks now target directly.

Levels
04
Skill Range
Beginner Expert
Track
Cloud Security
Lifetime Access
Microsoft Azure Security
From 241CREDS

Azure security is identity security, because Entra ID sits in front of everything and is now a primary attack target in its own right. This course covers Entra ID architecture, conditional access policies that actually block the attacks they are meant to, privileged identity management, and the hybrid join and sync arrangements that quietly bridge on-premises Active Directory to the cloud. You will secure networking with network security groups, Azure Firewall, and private endpoints, protect storage and key material with Key Vault, and apply Azure Policy to enforce configuration at scale. Microsoft Defender for Cloud and Sentinel are used for posture management and detection, with hands-on hunting across sign-in and audit logs.

Curriculum

Learning Path

Each level is enrolled separately. Work through them in order, or start at the level that matches your experience.

  1. Level 01

    Beginner

    241 CREDS

    Purpose

    Start Azure security at Entra ID, the identity plane most enterprise attacks now target directly.

    Outcome

    You can navigate Entra ID and read what identities are doing.

    What You'll Learn
    • Map Entra ID architecture and how identities and roles are assigned.
    • Read sign-in and audit logs to see what an account did.
    • Identify the highest-risk role assignments in a tenant.
  2. Level 02

    Intermediate

    484 CREDS

    Purpose

    Configure conditional access that blocks the attacks it is meant to.

    Outcome

    You can build conditional access that stops attacks without blocking work.

    What You'll Learn
    • Build conditional access policies and test them against real sign-ins.
    • Apply privileged identity management for just-in-time elevation.
    • Verify a policy blocks what you expect and does not lock out legitimate users.
  3. Level 03

    Advanced

    697 CREDS

    Purpose

    Secure Azure networking, storage, and the hybrid link back to on-premises Active Directory.

    Outcome

    You can secure Azure workloads and the hybrid identity bridge.

    What You'll Learn
    • Design network security groups, Azure Firewall, and private endpoints.
    • Protect storage and key material with Key Vault.
    • Secure hybrid join and sync so the cloud does not inherit on-premises weaknesses.
  4. Level 04

    Expert

    1,070 CREDS

    Purpose

    Enforce configuration at scale and hunt across Azure with Defender and Sentinel.

    Outcome

    You can enforce and monitor security across an Azure estate.

    What You'll Learn
    • Apply Azure Policy to enforce secure configuration across subscriptions.
    • Use Defender for Cloud for posture management and prioritised alerts.
    • Hunt across sign-in and audit logs in Sentinel to trace an incident.