SC-500T00: Implement end‑to‑end security controls for cloud and AI workloads

About this course

This course prepares you to design, implement, and manage end-to-end security controls across Microsoft Azure and Microsoft 365 environments — including the emerging landscape of AI workloads and autonomous agents. Through a combination of instructor-led sessions and hands-on labs, you build practical skills in identity security, cloud infrastructure protection, threat detection, and posture management. This course is intended for security engineers who are responsible for planning and implementing security controls across cloud, hybrid, and multi-cloud environments using Microsoft security technologies. Audience Profile As a candidate for this course, you’re a security engineer who protects organizational systems and data across cloud and hybrid environments by implementing comprehensive security controls that prevent unauthorized access and mitigate risks proactively. This role spans multiple security domains including identity, network, application, data, and compute. This role also ensures that platforms, data, identities, and infrastructure used by AI workloads are securely implemented and monitored. You work closely with architects, administrators, engineers, analysts, and developers responsible for Azure, Microsoft 365, identity and access, information protection, security operations, devops, application development, database platforms, and networks. You should have practical experience in administration of Microsoft Azure and hybrid environments, including compute, network, and storage. You should have strong familiarity with Microsoft Entra ID and familiarity with Microsoft 365 administration. Your responsibilities for this role include: Securing access to resources by using Microsoft Entra ID and Azure Key Vault Enforcing security and regulatory compliance Securing storage, databases, and networking Securing compute Securing AI solutions Managing and monitoring security posture

Instructor-led training for professionals and companies in Chile. Request dates, schedules, seats and commercial terms. Training hours and daily scheduling follow Netsolutions planning and are confirmed in the commercial proposal.

Course syllabus

1. Secure access to resources by using Microsoft Entra
2. Manage and implement authentication methods in Microsoft Entra ID
3. Implement and configure Privileged Identity Management (PIM)
4. Authenticate your API plugin for declarative agents with secured APIs
5. Secure Azure Key Vault with defense in depth for the cloud and AI workloads
6. Configure and secure Azure Key Vault
7. Manage keys and secrets in Azure Key Vault
8. Manage certificates and monitor Azure Key Vault
9. Protect Azure Key Vault with Microsoft Defender for Cloud
10. Enforce security governance and regulatory compliance
11. Enforce governance with Azure Policy and resource locks
12. Configure security controls and remediate recommendations in Defender for Cloud
13. Evaluate regulatory compliance in Defender for Cloud
14. Manage and right-size RBAC role assignments for least privilege
15. Protect backup data with Azure Backup security features
16. Implement security controls in infrastructure as code
17. Implement security for Azure Storage for the cloud and AI security engineer
18. Describe Azure storage services
19. Implement security and manage access for Azure Storage
20. Configure network security for Azure Storage
21. Implement Microsoft Defender for Storage
22. Implement security for Azure SQL databases
23. Configure platform-level security for Azure SQL
24. Configure auditing for Azure SQL Database and SQL Managed Instance
25. Implement Microsoft Defender for Databases
26. Implement network security controls in Azure
27. Segment and isolate Azure workloads using network security controls
28. Centralize and enforce traffic inspection using Azure Firewall
29. Secure remote and hybrid connectivity using VPN gateways and Microsoft Entra Private Access
30. Eliminate public network exposure of Azure PaaS services
31. Implement security for AI
32. Secure access for Microsoft Entra Agent Identity
33. Analyze AI identity risks using Microsoft Defender XDR
34. Enable real-time protection for Copilot Studio agents
35. Configure AI Gateway security in Microsoft Foundry
36. Configure and manage guardrails in Microsoft Foundry
37. Protect AI workloads with Microsoft Defender for Cloud
38. Enable Defender for AI Services workload protection in Microsoft Defender for Cloud
39. Manage agents using Microsoft Agent 365
40. Identify AI data risks using Microsoft Purview Data Security Posture Management
41. Implement security for servers and virtual machines
42. Implement disk encryption for Azure virtual machines
43. Configure trusted launch security features for Azure virtual machines
44. Plan and implement Azure Bastion
45. Manage security for Arc-enabled hybrid servers
46. Implement Microsoft Defender for Servers
47. Enable and enforce just-in-time VM access
48. Enforce VM security configuration with Azure Machine Configuration
49. Secure Azure application platform services for the cloud and AI security engineer
50. Detect container risks using Microsoft Defender for Containers
51. Implement security controls for Azure Kubernetes Service
52. Implement security controls for Azure Container Registry, Container Instances, and Container Apps
53. Implement security controls for Azure Function apps and Logic apps
54. Implement security controls for Azure App Services and Web Application Firewall
55. Implement API backend security using Azure API Management
56. Manage security posture by using Microsoft Defender for Cloud
57. Connect hybrid and multicloud environments to Microsoft Defender for Cloud
58. Identify security risks by using Cloud Security Posture Management
59. Discover unprotected assets and vulnerabilities by using Microsoft Defender External Attack Surface Management
60. Enable and configure workload protection plans in Microsoft Defender for Cloud
61. Configure Microsoft Defender Vulnerability Management settings for Azure VMs
62. Implement activity and event collection in Microsoft Sentinel
63. Create and manage Microsoft Sentinel workspaces
64. Manage content in Microsoft Sentinel
65. Connect Microsoft services to Microsoft Sentinel
66. Connect syslog data sources to Microsoft Sentinel
67. Connect Common Event Format logs to Microsoft Sentinel
68. Connect Windows hosts to Microsoft Sentinel
69. Implement automation rules and playbooks in Microsoft Sentinel
70. Manage data storage and query audit logs in Microsoft Sentinel
71. Deploy and operate Microsoft Security Copilot
72. Describe Microsoft Security Copilot
73. Configure workspaces for Microsoft Security Copilot
74. Manage plugins and agents in Microsoft Security Copilot