Applied Skills
Get started with cloud security and monitoring tasksSecure Azure services and workloads with Microsoft Defender for Cloud regulatory compliance controlsConfigure secure access to your workloads using Azure networkingSecure storage for Azure Files and Azure Blob StorageSecure AI Solutions in the CloudGet started with identities and access using Microsoft EntraProtect information in Microsoft 365 Copilot by using Microsoft Purview
Microsoft Learn
Assign a sponsor and owner to an agent identityApply Conditional Access to an agent identity blueprintManage secrets with Azure Key VaultConfigure Key Vault networking settingsEnable soft delete in Azure Key VaultList access using Azure RBACGrant access using Azure RBACConnect to an Azure SQL server using an Azure Private EndpointImplement virtual networking with network security groupsDeploy API Management for generative AI APIsEnable just-in-time access on virtual machinesBack up an Azure virtual machineRestore Azure virtual machine dataCreate and use a container registryDiagnose and fix a failing container app deploymentEnable Defender for Cloud on your Azure subscriptionImplement Microsoft Defender for CloudEnable just-in-time access on Virtual Machines (Set up Microsoft Defender for Cloud)Investigate and respond with Security CopilotIntegrate an API plugin with an API secured with a keyIntegrate an API plugin with an API secured with OAuthConfigure authentication methods in Microsoft Entra IDCreate a Microsoft Sentinel workspaceEnable Microsoft Entra multifactor authenticationAdd an enterprise applicationWeb API app registration and API permissionsUse a managed identity on a virtual machine (VM) to access Azure Resource ManagerUse managed identities from a virtual machine to access Azure Cosmos DB.NET Web app accesses storage by using managed identities | AzureUse a Linux VM/VMSS to access Azure resourcesSet and retrieve a secret from Azure Key VaultSet & retrieve a secret from Key Vault using PowerShellAzure Quickstart - Create an Azure key vault and a secret using BicepProtect your resources with Defender CSPMProtect your key vaults with the Defender for Key Vault planCreate a custom policy definitionConfiguring Microsoft Defender for Cloud for Enhanced ProtectionConfiguring Microsoft Defender for Cloud for Enhanced Protection (Enable Defender for Cloud on your Azure subscription)Protect new resources with locksAdd a role assignment condition to restrict access to blobs using Azure CLICreate an Azure custom role with Azure CLIGrant a group access to Azure resources using Azure PowerShellDeploy & configure Azure Firewall using the Azure portalDeploy Microsoft Defender for StorageEnable Microsoft Entra-Only AuthenticationCreate and Utilize Microsoft Entra Server LoginsProtect your databases with Defender for DatabasesCreate a mesh network topology with Azure Virtual Network Manager using BicepCreate a mesh network topology with Azure Virtual Network ManagerCreate a mesh network topology with Azure Virtual Network Manager using Azure PowerShellCreate a secured hub-and-spoke network with Azure Virtual Network ManagerCreate a User VPN connection to Azure using Azure Virtual WAN - Certificate or RADIUS authenticationCreate site-to-site connections using Virtual WANCreate S2S VPN connection between on-premises network and Azure virtual network: Azure portalGet started with Microsoft Entra Private Access labsEnable Private Access traffic forwardingSet up the Private Network ConnectorConfigure per-app access to private resourcesConfigure Quick Access to private resourcesCreate an Azure Private Link serviceCreate an Azure private link service (quickstart)Create a private link service - BicepCreate a Private Link serviceCreate a private link service - ARM templateGuided Project - Configure secure access to workloads with Azure virtual networking servicesDeploy and configure Azure Firewall in a hybrid network by using the Azure portalDeploy and configure Azure Firewall in a hybrid network by using PowerShellDeploy and configure Azure Firewall and policy in a hybrid network by using the Azure portalSecure your hub virtual network using Azure Firewall ManagerCreate an AI Gateway tier (preview) instanceTransform and protect your API in Azure API ManagementImplement generative AI guardrails in Azure AI FoundryCreate a guardrail policyCreate and encrypt a Linux VM with Azure CLICreate and encrypt a Linux VM with the Azure portalCreate and encrypt a Linux VM with Azure PowerShellCreate and encrypt a Windows VM by using Azure CLICreate and encrypt a Windows VM by using the Azure portalCreate and encrypt a Windows VM by using Azure PowerShellDeploy Azure Bastion to a virtual network using an ARM templateConnect a machine to Arc-enabled servers (Windows or Linux install script)Protect your Virtual Machines (VMs) with Microsoft Defender for ServersAzure Kubernetes Services Governance with Azure PolicyCustomer-Managed Keys for Azure Container RegistryRotate and Revoke a Key for Azure Container RegistryDeploy a confidential container to Azure Container Instances via Azure portalPrepare a deployment for a confidential container on Azure Container InstancesCreate an Application Gateway With a Web Application Firewall Using the Azure PortalEnable Web Application FirewallIsolate Back-End Communication with Virtual Network IntegrationOnboard to Microsoft SentinelDetect threats by using analytics rules in Microsoft SentinelUse a Microsoft Sentinel playbook to stop potentially compromised usersForward Syslog data to Microsoft Sentinel and Azure Monitor by using Azure Monitor AgentStart recording activity in the Unified Audit LogProtect your applications with Microsoft Defender for App ServiceCreate a private endpointCreate a private endpoint (quickstart)Connect to an Azure SQL server using an Azure Private Endpoint (tutorial)
Microsoft GitHub
Configure Privileged Identity ManagementConfigure PIM-eligible role assignments, activation settings, and approval workflows to enforce just-in-time privileged access to Microsoft Entra roles.Deploy and Secure Azure Key VaultDeploy an Azure Key Vault using RBAC, store secrets and keys, and apply network firewall rules and Defender for Key Vault protection.Configure Azure Policy and Role-Based Access ControlAssign Azure Policy, create a custom Azure role, and remediate an overprivileged role assignment using an Entra ID Access Review.Enforce MFA with Conditional AccessCreate a Conditional Access policy that enforces MFA, validate it in Report-only mode, and register an application with scoped API permissions.Secure Azure StorageRestrict network access to a storage account, generate a SAS token, and enable Defender for Storage.Secure Azure SQL DatabaseReplace SQL authentication with Entra ID group-based authentication, restrict access via Private Endpoint, and enable Defender for Databases.Configure Network Security ControlsApply NSG rules with Application Security Groups, deploy Azure Firewall, and validate configuration with Network Watcher.Configure AI Gateway and Foundry Security ControlsConfigure token rate limiting in API Management, create a Prompt Shield content safety guardrail, and enable Defender for AI Services.Monitor AI Security with Defender for CloudReview the Microsoft Defender for Cloud Data and AI security dashboard for AI workload protection findings.Identify AI Data Risks with Microsoft PurviewNavigate the Microsoft Purview DSPM for AI dashboard to identify SharePoint oversharing risks and unlabeled sensitive data.Secure Microsoft Entra Agent IdentitiesCreate Conditional Access policies scoped to agent identities, analyze blast radius in Defender XDR, and enable real-time protection in Copilot Studio.Secure Container Workloads with AKS and Defender for ContainersEnable Defender for Containers on an AKS cluster and remediate access and network security gaps in Azure Container Registry.Secure Azure App Services and API ManagementUse WAF detection controls, configure Microsoft Entra authentication for app services, and enforce API subscription key protection.Explore Defender for Cloud Security Posture and CSPMReview Defender CSPM posture, compliance, secret scanning, attack paths, and governance workflows.Configure Microsoft Sentinel Data Collection and AutomationConnect Microsoft Defender XDR and Azure Activity data into Sentinel and configure automation rules that trigger a playbook.Configure and Use Microsoft Security CopilotProvision Security Copilot capacity, configure roles, enable core security plugins, and run grounded security prompts.
