SC-500: Implement End to End Security Controls for Cloud and AI Workloads

Learning Path: Identity and Access Control

Lessons:

• The Standing Access Problem
• Privileged Identity Management (PIM)
• Conditional Access — Beyond Security Defaults

Lab:

• Configure Privileged Identity Management

Learning Path: Secure Azure Key Vault

Lessons:

• The Secrets problem
• Keu Vault fundamentals

Lab:

• Deploy and secure Azure Key Vault

Learning Path: Security Governance and Role Management

Lesson:

• Overprivileged and Policy Gaps

Lab:

• Configure Azure Policy and Role-Based Access Control

Learning Path: Security for Azure Storage

Lesson:

• Describe Azure storage services and security

Lab:

• Secure Azure Storage

Learning Path: Security for Azure databases

Lesson:

• Configure platform-level security for Azure SQL

Lab:

• Secure Azure SQL Database

Learning Path: Security for Azure Networks

Lesson:

• Securing Azure Network.

Lab:

• Configure Network Security Controls

Learning Path: Security for servers and virtual machines

Lessons:

• Secure servers and virtual machines

Lab:

• No lab

Learning Path: AI data risk and exposure with Microsoft Purview
Data Security Posture Management (DSPM)

Lesson:

• Data exposure challenges

Lab:

• No lab

Learning Path: AI agent identity and access security in Microsoft Entra

Lesson:

• Secure non-human identities before they become persistence paths

Lab:

• No lab

Learning Path: Microsoft Foundry (formerly Azure AI Studio) and AI Gateway Security

Lesson:

• API Management AI gateway governs access and traffic

Lab:

• Configure AI Gateway and Foundry Security Controls

Learning Path: AI Security Monitoring with Defender for Cloud

Lesson:

• Defender for Cloud – Security Dashboard

Lab:

• Monitor AI Security with Defender for Cloud

Learning Path: Security for Application Platform Services

Lesson:

• Containers, App Service, WAF, and API perimeter security

Labs:

• Secure Container Workloads with AKS and Defender for Containers
• Secure Azure App Services and API Management

Learning Path: Defender for Cloud Security Posture Management (CSPM)

Lesson:

• Defender for Cloud CSPM and posture operations

Lab:

• Explore Defender for Cloud Security Posture and CSPM

Learning Path: Microsoft Sentinel Data Collection and Configuration

Lesson:

• Sentinel data collection and automation fundamentals

Lab:

• No lab

Learning Path: Microsoft Security Copilot Configuration 

Lessons:

• Security Copilot configuration and governance

Lab:

• No lab

As a candidate for this course, you’re a security engineer who protects organizational systems and data across cloud and hybrid environments by implementing comprehensive security controls that prevent unauthorized access and mitigate risks proactively. This role spans multiple security domains including identity, network, application, data, and compute. This role also ensures that platforms, data, identities, and infrastructure used by AI workloads are securely implemented and monitored. You work closely with architects, administrators, engineers, analysts, and developers responsible for Azure, Microsoft 365, identity and access, information protection, security operations, devops, application development, database platforms, and networks.

Before attending this course, students must have:

• Strong familiarity with Microsoft Entra ID and familiarity with Microsoft 365 administration
• Securing access to resources by using Microsoft Entra ID and Azure Key Vault
• Enforcing security and regulatory compliance
• Securing storage, databases, and networking
• Securing compute
• Securing AI solutions
• Managing and monitoring security posture