This course prepares you to design, implement, and manage end-to-end security controls across Microsoft Azure and Microsoft 365 environments — including the emerging landscape of AI workloads and autonomous agents. Through a combination of instructor-led sessions and hands-on labs, you build practical skills in identity security, cloud infrastructure protection, threat detection, and posture management. This course is intended for security engineers who are responsible for planning and implementing security controls across cloud, hybrid, and multi-cloud environments using Microsoft security technologies.

About our Certification Fast Track

With our Certification Fast Track Training, you participate in official Microsoft training - but instead of a full week from Monday to Friday, the training is split into two smaller sections.

The Instructor-led part of the training is focused on hands on and best practices. The theoretical part of the courseware will be studied self-paced, in order not to loose precious practice time during your instructor led training days. Exam preparation is an important part of this training delivery - hence we include a Practice Test which will ensure that you will start your exam well prepared. To complete the offer the Exam Voucher is already included as well.

As a participant, you can use the time in between the training days to deepen or repeat content. In addition, you have the advantage of not being absent from work for an entire week, so that day-to-day business is not neglected.

Process of Certification Fast Track Training

After your registration you will receive an introduction to the program. You will also receive reminder e-mails from us along the way.

Below are your 5 steps of your Certification Fast Track training:

1. Self study part of the theory and labs (max 18 hours, which can be spread out over several weeks)
2. Take your 2-day Instructor Led Training, hands on practice and theory (The first 2 days of the displayed dates in the schedule)
3. Continue to practice your labs, studying your theory and complete the provided Official Microsoft Practice Test. The practice test shows you which topics need more attention.
4. Take your 1-day Instructor Led Exam Preparation Training. The instructor will clear out any questions that you have left (The last day of the displayed dates in the schedule). 
5. Use your MCP exam voucher to complete your exam within two weeks after the Exam Prep Training.

Audience Profile

As a candidate for this course, you’re a security engineer who protects organizational systems and data across cloud and hybrid environments by implementing comprehensive security controls that prevent unauthorized access and mitigate risks proactively. This role spans multiple security domains including identity, network, application, data, and compute. This role also ensures that platforms, data, identities, and infrastructure used by AI workloads are securely implemented and monitored. You work closely with architects, administrators, engineers, analysts, and developers responsible for Azure, Microsoft 365, identity and access, information protection, security operations, devops, application development, database platforms, and networks. You should have practical experience in administration of Microsoft Azure and hybrid environments, including compute, network, and storage. You should have strong familiarity with Microsoft Entra ID and familiarity with Microsoft 365 administration. Your responsibilities for this role include:

• Securing access to resources by using Microsoft Entra ID and Azure Key Vault
• Enforcing security and regulatory compliance
• Securing storage, databases, and networking
• Securing compute
• Securing AI solutions
• Managing and monitoring security posture

Prerequisites

• Familiarity with Microsoft Entra ID concepts, including users, groups, and directory roles
• Understanding of Azure role-based access control (RBAC), including role assignments and the Azure scope hierarchy (management group, subscription, resource group, resource)
• Basic experience navigating the Azure portal and the Microsoft Entra admin center
• Familiarity with Zero Trust security principles, including least privilege and assume breach
• Awareness of Microsoft Entra ID P2 or Microsoft Entra ID Governance licensing requirements

Course Syllabus

Secure access to resources by using Microsoft Entra

• Manage and implement authentication methods in Microsoft Entra ID
• Implement and configure Privileged Identity Management (PIM)
• Authenticate your API plugin for declarative agents with secured APIs

Secure Azure Key Vault with defense in depth for the cloud and AI workloads

• Configure and secure Azure Key Vault
• Manage keys and secrets in Azure Key Vault
• Manage certificates and monitor Azure Key Vault
• Protect Azure Key Vault with Microsoft Defender for Cloud

Enforce security governance and regulatory compliance

• Enforce governance with Azure Policy and resource locks
• Configure security controls and remediate recommendations in Defender for Cloud
• Evaluate regulatory compliance in Defender for Cloud
• Manage and right-size RBAC role assignments for least privilege
• Protect backup data with Azure Backup security features
• Implement security controls in infrastructure as code

Implement security for Azure Storage for the cloud and AI security engineer

• Describe Azure storage services
• Implement security and manage access for Azure Storage
• Configure network security for Azure Storage
• Implement Microsoft Defender for Storage

Implement security for Azure SQL databases

• Configure platform-level security for Azure SQL
• Configure auditing for Azure SQL Database and SQL Managed Instance
• Implement Microsoft Defender for Databases

Implement network security controls in Azure

• Segment and isolate Azure workloads using network security controls
• Centralize and enforce traffic inspection using Azure Firewall
• Secure remote and hybrid connectivity using VPN gateways and Microsoft Entra Private Access
• Eliminate public network exposure of Azure PaaS services

Implement security for AI

• Secure access for Microsoft Entra Agent Identity
• Analyze AI identity risks using Microsoft Defender XDR
• Enable real-time protection for Copilot Studio agents
• Configure AI Gateway security in Microsoft Foundry
• Configure and manage guardrails in Microsoft Foundry
• Protect AI workloads with Microsoft Defender for Cloud
• Enable Defender for AI Services workload protection in Microsoft Defender for Cloud
• Manage agents using Microsoft Agent 365
• Identify AI data risks using Microsoft Purview Data Security Posture Management

Implement security for servers and virtual machines

• Implement disk encryption for Azure virtual machines
• Configure trusted launch security features for Azure virtual machines
• Plan and implement Azure Bastion
• Manage security for Arc-enabled hybrid servers
• Implement Microsoft Defender for Servers
• Enable and enforce just-in-time VM access
• Enforce VM security configuration with Azure Machine Configuration

Secure Azure application platform services for the cloud and AI security engineer

• Detect container risks using Microsoft Defender for Containers
• Implement security controls for Azure Kubernetes Service
• Implement security controls for Azure Container Registry, Container Instances, and Container Apps
• Implement security controls for Azure Function apps and Logic apps
• Implement security controls for Azure App Services and Web Application Firewall
• Implement API backend security using Azure API Management

Manage security posture by using Microsoft Defender for Cloud

• Connect hybrid and multicloud environments to Microsoft Defender for Cloud
• Identify security risks by using Cloud Security Posture Management
• Discover unprotected assets and vulnerabilities by using Microsoft Defender External Attack Surface Management
• Evaluate regulatory compliance in Defender for Cloud
• Enable and configure workload protection plans in Microsoft Defender for Cloud
• Configure Microsoft Defender Vulnerability Management settings for Azure VMs

Implement activity and event collection in Microsoft Sentinel

• Create and manage Microsoft Sentinel workspaces
• Manage content in Microsoft Sentinel
• Connect Microsoft services to Microsoft Sentinel
• Connect syslog data sources to Microsoft Sentinel
• Connect Common Event Format logs to Microsoft Sentinel
• Connect Windows hosts to Microsoft Sentinel
• Implement automation rules and playbooks in Microsoft Sentinel
• Manage data storage and query audit logs in Microsoft Sentinel

Deploy and operate Microsoft Security Copilot

• Describe Microsoft Security Copilot
• Configure workspaces for Microsoft Security Copilot
• Manage plugins and agents in Microsoft Security Copilot