SC-500: Implement end‑to‑end security controls for cloud and AI workloads

This course teaches students how to design, implement, and manage security controls across Microsoft Azure, Microsoft 365, and AI-powered environments. Through a combination of instructor-led training and hands-on labs, learners gain practical experience in identity and access management, cloud security, threat detection, security monitoring, and security posture management.

The course is designed for security engineers responsible for planning and implementing security solutions across cloud, hybrid, and multi-cloud environments using Microsoft security technologies.

Before attending this course, learners should have:

• Experience working with Microsoft Azure administration and core Azure services.
• A good understanding of networking, virtual machines, storage, and cloud infrastructure concepts.
• Familiarity with Microsoft 365 services and identity management.
• Basic knowledge of Microsoft Entra ID, authentication, and access control concepts.
• An understanding of cybersecurity principles, including threat protection, risk management, and security monitoring.
• Experience with Azure Portal and managing cloud resources.

After completing this course, students will be able to:

• Design and implement identity and access management solutions using Microsoft security technologies.
• Secure Azure infrastructure, workloads, and resources using industry best practices.
• Configure and manage security controls across Microsoft Azure and Microsoft 365 environments.
• Monitor, detect, and respond to security threats using Microsoft security tools.
• Implement security posture management and compliance controls.
• Protect cloud, hybrid, and multi-cloud environments from evolving cyber threats.
• Secure AI workloads and understand security considerations for AI-powered solutions and autonomous agents.
• Investigate security incidents and analyse security alerts effectively.
• Apply Zero Trust security principles across identities, devices, applications, and data.
• Develop a comprehensive security strategy that supports organisational risk and compliance requirements.

Secure Access to Resources by Using Microsoft Entra

• Manage and Implement Authentication Methods in Microsoft Entra ID
• Implement and Configure Privileged Identity Management (PIM)
• Authenticate Your API Plugin for Declarative Agents with Secured APIs

Secure Azure Key Vault with Defense in Depth for the Cloud and AI Workloads

• Configure and Secure Azure Key Vault
• Manage Keys and Secrets in Azure Key Vault
• Manage Certificates and Monitor Azure Key Vault
• Protect Azure Key Vault with Microsoft Defender for Cloud

Enforce Security Governance and Regulatory Compliance

• Enforce Governance with Azure Policy and Resource Locks
• Configure Security Controls and Remediate Recommendations in Defender for Cloud
• Evaluate Regulatory Compliance in Defender for Cloud
• Manage and Right-Size RBAC Role Assignments for Least Privilege
• Protect Backup Data with Azure Backup Security Features
• Implement Security Controls in Infrastructure as Code

Implement Security for Azure Storage for the Cloud and AI Security Engineer

• Describe Azure Storage Services
• Implement Security and Manage Access for Azure Storage
• Configure Network Security for Azure Storage
• Implement Microsoft Defender for Storage

Implement Security for Azure SQL Databases

• Configure Platform-Level Security for Azure SQL
• Configure Auditing for Azure SQL Database and Azure SQL Managed Instance
• Implement Microsoft Defender for Databases