Course Title: Implement End-to-End Security Controls for Cloud and AI Workloads
Duration: 4 or 5 Days (Instructor-Led Training)
Level: Intermediate
Certification: Cloud and AI Security Engineer Associate
Course Description
This course provides IT and Cybersecurity professionals with knowledge and practical skills to implement security controls.
Additionally, a Cloud and AI Security Engineer course covers Azure, Microsoft 365, and AI environments across cloud workloads.
Participants will learn to secure identities, networks, applications, and data.
They will address challenges from generative AI, AI agents, and cloud-based workloads.
The course combines instructor-led instruction, practical demonstrations, and hands-on laboratory exercises. Additionally, it prepares participants for real-world Cloud and AI Security Engineer duties and the Microsoft SC-500 certification exam.
Course Objectives
Upon successful completion of this course, participants will be able to:
- Implement identity and access security using Microsoft Entra ID.
- Secure privileged accounts, service identities, and application access.
- Configure and manage Azure Key Vault and encryption controls.
- Implement security and regulatory compliance controls.
- Secure Azure networking, storage, databases, and compute resources.
- Protect AI applications, generative AI models, and AI agents.
- Implement Microsoft Defender for Cloud and cloud security posture management.
- Monitor security threats and investigate incidents using Microsoft Sentinel.
- Apply security governance and risk management practices across cloud and AI environments.
Course Outline
Module 1: Implement Identity and Access Security
- Microsoft Entra ID security fundamentals
- Multi-factor authentication and Conditional Access
- Role-based access control (RBAC)
- Privileged Identity Management (PIM)
- Managed identities and service principals
- Identity Protection and access reviews
Module 2: Implement Security for Azure Key Vault
- Azure Key Vault architecture and security
- Managing keys, secrets, and certificates
- Key Vault authentication and authorization
- Network access and private endpoints
- Key rotation and lifecycle management
- Monitoring and auditing Key Vault access
Module 3: Implement Security Governance and Compliance
- Azure Policy and governance controls
- Management groups and Azure resource organization
- Security baselines and regulatory compliance
- Microsoft Defender for Cloud regulatory compliance
- Microsoft Purview information protection
- Security assessments and remediation
Module 4: Implement Storage Security
- Azure Storage security architecture
- Storage account authentication and authorization
- Encryption at rest and in transit
- Shared access signatures and access keys
- Private endpoints and storage firewalls
- Storage threat protection and monitoring
Module 5: Implement Database Security
- Azure SQL security fundamentals
- Database authentication and authorization
- Transparent Data Encryption (TDE)
- Data masking and sensitive data protection
- Database auditing and vulnerability assessments
- Microsoft Defender for SQL
Module 6: Implement Network Security
- Azure virtual network security
- Network Security Groups (NSGs)
- Azure Firewall and firewall policies
- Azure Web Application Firewall (WAF)
- Azure DDoS Protection
- Private Link and private endpoints
- Network monitoring and threat detection
Module 7: Implement Compute Security
- Azure Virtual Machine security
- Operating system hardening and patch management
- Azure Bastion and secure administrative access
- Container and Kubernetes security
- Azure App Service security
- Workload identities and application security
- Microsoft Defender for Servers and Containers
Module 8: Implement Security for AI Solutions
- Microsoft Foundry security architecture
- Securing generative AI applications and models
- AI authentication and authorization
- Securing AI agents and connected tools
- Prompt injection and adversarial AI threats
- Protecting sensitive data in AI workloads
- Securing retrieval-augmented generation (RAG) solutions
- AI workload monitoring and security controls
Module 9: Implement Cloud Security Posture Management
- Microsoft Defender for Cloud architecture
- Microsoft Defender Cloud Security Posture Management (CSPM)
- Secure Score and security recommendations
- Cloud workload protection
- Vulnerability management and remediation
- Attack path analysis and risk prioritization
- Continuous security posture monitoring
Module 10: Implement Security Monitoring and Threat Protection
- Microsoft Sentinel fundamentals
- Log Analytics and data collection
- Kusto Query Language (KQL) fundamentals
- Security analytics and detection rules
- Threat hunting and incident investigation
- Automated response and security orchestration
- Microsoft Security Copilot for security operations