Become a Microsoft Certified Cloud and AI Security Engineer Associate (AZ-900 + SC-500)

Microsoft Azure AZ-900 fundamentals (1 day)

Module 1: discover cloud computing

• Different cloud computing concepts.
• Cloud services (IaaS, PaaS, SaaS).
• Public, private and hybrid cloud models.

Module 2: discover core Azure services

• Main components of Azure architecture.
• Azure workloads.
• Azure networking services.
• Azure storage services.
• Azure database structure.

Module 3: select suitable Azure solutions and tools

• Selecting an Azure IoT service.
• Selecting an AI service.
• Selecting an Azure server technology.
• Selecting suitable tools for DevOps and GitHub.
• Selecting management tools.
• Selecting an Azure monitoring service.

Module 4: discover basic Azure security and networking features

• Security tools and features.
• Configuring network connectivity.

Module 5: manage identities, governance and compliance

• Core Azure identity services.
• Azure governance strategy.
• Privacy, compliance and data protection standards.

Module 6: control Azure costs and the service lifecycle

• Forecasting and managing expenditure.
• Managing service-level agreements (SLAs).

Secure cloud and AI environments with SC-500 (4 days)

Module 7: secure identity, access and governance

• Conditional Access policies and authentication methods, including MFA and passwordless authentication.
• Managing privileged identities with Privileged Identity Management and managed identities for Azure resources.
• Securing secrets, keys and certificates with Azure Key Vault.
• Governance controls with Azure Policy, RBAC roles and resource locks for regulatory compliance.

Labs

• Configure a Conditional Access policy and deploy a firewall-protected Azure Key Vault.

Module 8: secure storage, databases and networking

• Firewall rules and access policies for Azure storage accounts.
• Security configurations and auditing for Azure SQL Database and Azure SQL Managed Instance.
• Network security groups, application security groups and Azure Virtual Network Manager.
• Azure Firewall, private endpoints and secure VPN connections.

Labs

• Deploy a segmented network environment with security groups, private endpoints and Azure Firewall.

Module 9: secure computing and AI workloads

• Disk encryption, just-in-time access and Azure Bastion for virtual machines.
• Security controls for Azure Kubernetes Service, Azure Container Registry and Azure App Service.
• Detecting Copilot and AI agent risks with Microsoft Purview and Defender for Cloud.
• Conditional Access and real-time protection for Microsoft Copilot Studio agents and Microsoft Foundry.

Labs

• Configure a secure AI gateway in Azure API Management and enable Defender for the AI service.

Module 10: manage and monitor security posture

• Compliance assessment and vulnerability management with Microsoft Defender for Cloud.
• Connecting AWS and GCP multicloud environments to Defender for Cloud.
• Creating Microsoft Sentinel workspaces and configuring data connectors.
• Automation rules, playbooks and using Microsoft Security Copilot.

Labs

• Create a Microsoft Sentinel workspace and configure an incident response automation playbook.