AI Instructor Live Labs Included Exam Prep

AZ-500: Microsoft Azure Security Technologies

Master Azure security for the AZ-500 exam with 8 hands-on labs covering identity protection, network security, compute and data security, Microsoft Defender for Cloud, and Microsoft Sentinel.

Intermediate
1d 3h 35m
17 Lessons
AZ-500
AZ-500: Microsoft Azure Security Technologies Badge

View badge details

Exam Preparation

Exam Preparation Included

Practice with real exam-style questions for the AZ-500 certification. AI-powered feedback helps you understand every answer.

Practice Questions Track Progress AI Feedback

About This Course

Master Azure security technologies and prepare for the AZ-500 certification exam with this hands-on course covering all four exam domains across 8 interactive labs. You'll work in live Azure environments to implement, monitor, and maintain security solutions that protect cloud infrastructure, applications, and data.The course begins with securing identity and access configuring Microsoft Entra ID, implementing conditional access policies, managing privileged identity management, and securing authentication with multi-factor authentication and passwordless methods. You'll then dive into network security, configuring network security groups, Azure Firewall, Web Application Firewall, Azure DDoS Protection, and private endpoints to protect your Azure networking infrastructure.In the compute, storage, and database security domain, you'll learn to harden virtual machines, secure Azure Kubernetes Service deployments, implement Azure Key Vault for secrets and certificate management, configure storage encryption and access policies, and protect Azure SQL databases. The final domain covers security operations using Microsoft Defender for Cloud to assess security posture, implement security recommendations, and configure workload protections, plus Microsoft Sentinel for security information and event management (SIEM), threat detection, and automated incident response.Each lesson combines AI-guided teaching with real-world scenarios, hands-on exercises in live Azure subscriptions, and assessment questions mapped to exam objectives. Ideal for security engineers, Azure administrators, and IT professionals seeking to validate their cloud security expertise.

Course Curriculum

17 Lessons
01
AI Lesson
AI Lesson

Secure Identity and Access

1h 30m

AI-guided lesson on Azure RBAC, custom roles, PIM, MFA, Conditional Access, enterprise application management, app registrations, service principals, and managed identities. Covers the complete Secure Identity and Access exam domain (15-20%). The agent teaches concepts interactively — hands-on exercises are in the companion Lab Exercises lesson.

02
Lab Exercise
Lab Exercise

Secure Identity and Access - Lab Exercises

1h 30m 2 Exercises

Hands-on lab exercises for the Secure Identity and Access lesson. Create Entra ID users and security groups using the Azure portal, Microsoft Graph PowerShell, and Azure CLI. Assign RBAC roles and verify access inheritance through group membership.

Create Entra ID Users and Security Groups Create user accounts using the Azure portal, Microsoft Graph PowerShell, and Azure CLI. Create security groups and configure group membership. Demonstrates three methods for identity management in Microsoft Entra ID. ~20 min
Assign RBAC Roles and Verify Access Assign Azure RBAC built-in roles to security groups at resource group scope. Verify role assignment inheritance and check effective permissions using Azure CLI. ~20 min
03
AI Lesson
AI Lesson

Plan and Implement Virtual Network Security

1h 30m

AI-guided lesson on NSGs, ASGs, UDRs, VNet peering, VPN gateways, Virtual WAN, ExpressRoute encryption, and Network Watcher monitoring. Covers the virtual network security subdomain of the Secure Networking exam domain. The agent teaches concepts interactively — hands-on exercises are in the companion Lab Exercises lesson.

04
Lab Exercise
Lab Exercise

Plan and Implement Virtual Network Security - Lab Exercises

1h 30m 2 Exercises

Hands-on lab exercises for the Virtual Network Security lesson. Create virtual networks, application security groups, network security groups with ASG-based rules, deploy VMs, and test network traffic filtering.

Create the Virtual Networking Infrastructure Create a virtual network, application security groups, and a network security group with inbound rules for web and RDP traffic. ~20 min
Deploy Virtual Machines and Test Network Filters Deploy VMs into designated subnets, associate them with application security groups, and test network traffic filtering with NSG rules. ~25 min
05
AI Lesson
AI Lesson

Secure Public and Private Access to Azure Resources

1h 30m

AI-guided lesson on TLS, Azure Firewall, Application Gateway, Front Door, WAF, DDoS Protection, Service Endpoints, Private Endpoints, Private Link, and network security for App Service and SQL Managed Instance. Covers public and private access subdomains of Secure Networking. The agent teaches concepts interactively — hands-on exercises are in the companion Lab Exercises lesson.

06
Lab Exercise
Lab Exercise

Secure Public and Private Access to Azure Resources - Lab Exercises

1h 30m 1 Exercises

Hands-on lab exercises for the Secure Public and Private Access lesson. Deploy and configure an Azure Firewall with application and network rules, set up route tables, and test traffic filtering.

Deploy and Test an Azure Firewall Deploy an Azure Firewall, configure application and network rules, set up route tables, and test traffic filtering. ~40 min
07
AI Lesson
AI Lesson

Advanced Security for Compute

1h 30m

AI-guided lesson on Azure Bastion, JIT VM access, AKS security (network isolation, monitoring, authentication), ACI/ACA security, ACR access management, disk encryption, and API Management security. Covers the compute security subdomain. The agent teaches concepts interactively — hands-on exercises are in the companion Lab Exercises lesson.

08
Lab Exercise
Lab Exercise

Advanced Security for Compute - Lab Exercises

1h 30m 1 Exercises

Hands-on lab exercises for the Advanced Security for Compute lesson. Create an Azure Container Registry, build and push container images, deploy an AKS cluster with ACR integration, and configure both external and internal services.

Configure and Secure ACR and AKS Create an Azure Container Registry, build and push a container image, deploy an AKS cluster, grant ACR access, and deploy external and internal services. ~45 min
09
AI Lesson
AI Lesson

Plan and Implement Security for Storage

1h 30m

AI-guided lesson on storage access control, access keys, Azure Files and Blob access methods, soft delete, backups, versioning, immutable storage, BYOK, and double encryption. Covers the storage security subdomain. The agent teaches concepts interactively — hands-on exercises are in the companion Lab Exercises lesson.

10
Lab Exercise
Lab Exercise

Plan and Implement Security for Storage - Lab Exercises

1h 30m 1 Exercises

Hands-on lab exercises for the Security for Storage lesson. Configure virtual networks with service endpoints, create storage accounts with network rules, deploy VMs, and test storage access from authorized and unauthorized subnets.

Configure Service Endpoints and Secure Storage Create virtual networks with public and private subnets, configure NSGs, set up a storage account with service endpoints, and test access from both subnets. ~45 min
11
AI Lesson
AI Lesson

Security for Azure SQL Database

1h 30m

AI-guided lesson on Microsoft Entra database authentication, auditing, dynamic masking, TDE, and Always Encrypted. Covers the database security subdomain of the Secure Compute, Storage, and Databases exam domain. The agent teaches concepts interactively — hands-on exercises are in the companion Lab Exercises lesson.

12
Lab Exercise
Lab Exercise

Security for Azure SQL Database - Lab Exercises

1h 30m 1 Exercises

Hands-on lab exercises for the SQL Database Security lesson. Deploy an Azure SQL Database, enable Microsoft Defender for SQL, configure data classification with sensitivity labels, and set up auditing.

Implement SQL Database Security Features Deploy an Azure SQL Database, enable Microsoft Defender for SQL, configure data classification, and set up auditing. ~30 min
13
AI Lesson
AI Lesson

Azure Key Vault and Cloud Governance

1h 30m

AI-guided lesson on Azure Policy, Key Vault networking and access control, certificates, secrets, keys, key rotation, backup and recovery, and security controls for asset management. Covers the cloud governance subdomain of Defender for Cloud domain. The agent teaches concepts interactively — hands-on exercises are in the companion Lab Exercises lesson.

14
Lab Exercise
Lab Exercise

Azure Key Vault and Cloud Governance - Lab Exercises

1h 30m 1 Exercises

Hands-on lab exercises for the Key Vault and Cloud Governance lesson. Create and configure Azure Key Vault with keys and secrets, register applications in Entra ID, grant Key Vault access, and implement Always Encrypted for Azure SQL Database.

Configure Key Vault with Keys and Secrets Create and configure an Azure Key Vault, add keys and secrets, configure access policies, and set up Always Encrypted for an Azure SQL database. ~60 min
15
AI Lesson
AI Lesson

Defender for Cloud, Security Monitoring, and Microsoft Sentinel

2h 10m

AI-guided lesson on Defender for Cloud Secure Score, compliance frameworks, cloud workload protection plans, agentless scanning, vulnerability management, JIT VM access, Microsoft Sentinel for centralized threat detection with data connectors, analytics rules, automation playbooks, and incident management. Covers security posture, threat protection, and security monitoring/automation subdomains. The agent teaches concepts interactively — hands-on exercises are in the companion Lab Exercises lesson.

16
Lab Exercise
Lab Exercise

Defender for Cloud, Security Monitoring, and Microsoft Sentinel - Lab Exercises

2h 10m 4 Exercises

Hands-on lab exercises for the Defender for Cloud and Sentinel lesson. Deploy a VM, create a Log Analytics workspace, enable Microsoft Defender for Servers, configure JIT VM access, onboard Microsoft Sentinel with data connectors, analytics rules, and automated playbooks.

Deploy a VM and Create a Log Analytics Workspace Deploy an Azure VM, create a Log Analytics workspace and storage account, and configure a Data Collection Rule for centralized monitoring. ~25 min
Configure Microsoft Defender for Cloud Enhanced Security Enable Microsoft Defender for Servers Plan 2 and review advanced threat protection features including vulnerability assessment, file integrity monitoring, and adaptive security controls. ~15 min
Enable Just-in-Time VM Access Enable and configure Just-in-Time VM access to reduce brute-force attack surface by dynamically controlling management port access. ~15 min
Implement Microsoft Sentinel Onboard Microsoft Sentinel, configure data connectors, create analytics rules, build automated playbooks, and simulate an incident for end-to-end threat detection. ~30 min
17
Challenge
Challenge

AZ-500 Security Challenge

2h 15m 1 Exercises

Comprehensive security challenge covering all AZ-500 exam domains. Design and implement a secure Azure environment that includes identity and access management, network security, compute security, storage security, database security, Key Vault integration, and security monitoring. Demonstrate your ability to apply Azure security best practices in a real-world scenario.

Azure Security Implementation Challenge Design and implement a comprehensive Azure security environment covering identity management, network security, storage security, Key Vault, and security monitoring. Demonstrate mastery of AZ-500 concepts by building a secure infrastructure from scratch. ~90 min
$99 / 3 months access

This course includes:

  • 24/7 AI Instructor Support
  • Live Lab Environments
  • 17 Hands-on Lessons
  • Exam Prep Included
  • 3 Months Access
  • Completion Badge
  • Certificate of Completion
AZ-500: Microsoft Azure Security Technologies Badge

Earn Your Badge

Complete all lessons to unlock the AZ-500: Microsoft Azure Security Technologies achievement badge.

Category
Skill Level Intermediate
Total Duration 1d 3h 35m
AZ-500: Microsoft Azure Security Technologies Badge
Achievement Badge

AZ-500: Microsoft Azure Security Technologies

Awarded for completing the AZ-500 course covering Azure security including identity protection, network security, and data encryption.

Course AZ-500: Microsoft Azure Security Technologies
Criteria Complete all lessons in the AZ-500 Azure Security Technologies course
Valid For 730 days

Skills You'll Earn

Azure Security Identity Protection Network Security Data Encryption Security Operations Compliance

Complete all lessons in this course to earn this badge