Intermediate Level

Microsoft Certified Azure Security Engineer Associate (AZ-500)

★ 4.8 (300 learners) 60 hrs total 20 modules

Microsoft Azure Entra ID AKS Kubernetes

Only 5 seats left · Next batch starts 15 Aug 2026

Download Curriculum

60 hrs: of content
20 modules: in curriculum
16 projects: hands-on builds
Intermediate: difficulty

Curriculum covers

Frameworks you'll master

4 tools & frameworks

Microsoft Azure Entra ID AKS Kubernetes

Course Curriculum

20 modules · 60 hours · 24 live sessions

Basics – Security Operations Center (SOC) 1 sessions

Basics – Security Operations Center (SOC)
Complexity and Cyber Security Challenges
What is a SOC?
SOC Tier Model
Cyber Security Incident Response Process
EDR, XDR, SIEM & SOAR
Blue, Red & Purple Teaming
Basics – Cyber Threat Intelligence (CTI)
What is a Threat?
Intelligence, Threat Intelligence & Cyber Threat Intelligence (CTI)
What is CTI?
Threat, Vulnerability & Risk

ThreatInformed Défense 1 sessions

ThreatInformed Défense
Tactics, Techniques & Procedures (TTPs)
IOCs & IOAs
Pyramid of Pain
CTI Sources
Basics Vulnerabilities
What is a Vulnerability?
Common Vulnerabilities and Exposures (CVE)
Basics – Azure
Cloud Computing Properties
Cloud Computing Types
Azure Global Backbone

Shared Responsibility Model 1 sessions

Shared Responsibility Model
Azure Resource Hierarchy
Azure Subscription Types
Entra ID Tenants and Azure Subscriptions
Basics – Microsoft Security
Zero Trust
The Microsoft Security Cosmos
Manage Microsoft Entra Identities
Microsoft Entra
Microsoft Entra ID
User Identities
Managed Identities

Groups 1 sessions

Groups
Administrative Units
External Identities
Identity Protection
Manage Microsoft Entra Authentication
Authentication Methods
Attacks on Passwords
MultiFactor Authentication (MFA)
Passwordless Authentication
Password Protection
SingleSignon (SSO)
Entra Verified ID

SelfService Password Reset (SSPR) 1 sessions

SelfService Password Reset (SSPR)
Entra Connect
Demo: Deploy Azure Resources for Hybrid Identity
Demo: Setup Custom Domain
Demo: Setup Active Directory
Demo: Entra Connect
Hybrid Authentication
Entra Domain Services
Manage Microsoft Entra Authorization
Entra ID Roles
Demo: Custom Entra ID Roles
Azure RoleBasedAccessControl (RBAC)

Demo: Custom Azure RBAC 1 sessions

Demo: Custom Azure RBAC
Demo: Builtin Azure RBAC
Azure RBAC vs. Entra ID Roles
Entra ID Governance
Entra ID Entitlement Management
Privileged Identity Management (PIM)
Demo: Configure PIM
Access Reviews
Entra Permissions Management (EPM)
Conditional Access
Manage Microsoft Entra Application Access
Application Identities & Application Registrations

Demo: Create an Application Registration 1 sessions

Demo: Create an Application Registration
Demo: App Authentication
Demo: App API Permissions
Plan & Implement Security for Virtual Networks
Azure Virtual Networks (VNets)
Demo: NAT Gateway
Network Security Groups (NSGs)
Application Security Groups (ASGs)
User Defined Routing (UDR)
VNet Peering
VPN in Azure
Demo: Configure S2S VPN

Resource Firewalls 1 sessions

Resource Firewalls
Plan & Implement Security for private access to Azure resources
Service Endpoints
Azure Private Link
Demo: Service & Private Endpoints
Express Route & Private Link
Azure App Service
Demo: Azure App Service
Plan & Implement Security for private access to Azure resources
Azure Firewall
Azure Load Balancer
Azure Application Gateway

Azure Front Door 1 sessions

Azure Front Door
Azure Web Application Firewall (WAF)
Azure DDoS Protection
Plan & Implement Advanced Security for compute
Azure Compute Services
Azure Virtual Machines (VMs)
Demo: Configure Azure VMs
Disk Encryption Options in Azure
Azure Disk Encryption (ADE)
Encryption at Host
Plan & Implement Security for storage
Azure Storage Services

Demo: Azure Storage Account 1 sessions

Demo: Azure Storage Account
Authentication and Authorization for Azure Storage
Storage Account Access Keys
Shared Access Signatures (SAS)
Plan & Implement Advanced Security for Azure SQL Database and SQL Managed Instance
Azure SQL
Demo: Azure SQL Database
Azure SQL Transparent Data Encryption (TDE)
Azure SQL Always Encrypted
Plan, Implement, and manage Governance for security
Azure Policy
Azure Policy Effects

Azure Resource Manager & Azure Policy Engine 1 sessions

Azure Resource Manager & Azure Policy Engine
Azure Landing Zones
Azure Key Vault
Manage Security Posture by using Microsoft Defender for cloud
What is Microsoft Defender for Cloud?
CSPM & CWP
Defender for Cloud RBAC
Demo: Enable All Plans in Defender for Cloud
What is CSPM?
CSPM Plans
Asset Inventory
Security Recommendations

Secure Score 1 sessions

Secure Score
Demo: Azure Workbooks in Defender for Cloud
Data Exporting
Remediation
Microsoft Cloud Security Benchmark
Governance Management
Regulatory Compliance
Cloud Security Explorer
Attack Path Analysis
Agentless Vulnerability Scanning
Agentless Discovery for Kubernetes
Container Registry Vulnerability Assessment

Data Aware Security Posture 1 sessions

Data Aware Security Posture
EASM Insights in Network Exposure
Configure and manage Threat Protection by using Microsoft Defender for Cloud
What is CWP?
Demo: Install VirtualBox
Demo: Install Kali Linux
Demo: Configure Kali Keyboard Layout
Demo: Install Tor Browser in Kali
Demo: Create Resource Group
Alert Queue
Demo: Create Sample Alerts
Demo: Create Suppression Rules

Demo: Setup Email Notifications 1 sessions

Demo: Setup Email Notifications
What is Defender for Servers?
Agents
Defender for Servers Plans
Defender for Endpoint Integration
Licensing
Defender for Endpoint Provisioning
Threat Detection for OSLevel
Alerts for Windows Machines
Alerts for Linux Machines
Demo: Create Virtual Machines
Demo: Brute Force SSH

Threat Detection for Network Level 1 sessions

Threat Detection for Network Level
Adaptive Application Controls
Justintime VM access
Adaptive Network Hardening
File Integrity Monitoring
Network Map
Overview Defender for Databases
Defender for SQL Databases
Defender for OpenSource Relational Databases
Defender for Cosmos DB
Overview Defender for Storage
Demo: Create a Storage Account

Demo: Defender for Storage 1 sessions

Demo: Defender for Storage
Overview Defender for Containers
Environment Hardening
Vulnerability Assessment
Threat Protection
Demo: Create an AKS Cluster
Overview Defender for Key Vault
Demo: Create an Azure Key Vault
Demo: Defender for Key Vault
Overview Defender for Resource Manager
Workflow Automation
Azure Logic Apps

Demo: Malware Scanning Response with Workflow Automation & Azure Logic Apps 1 sessions

Demo: Malware Scanning Response with Workflow Automation & Azure Logic Apps
Integration with Azure DDoS Protection
Integration with Azure WAF
Integration with Sentinel
Configure and manage security monitoring and automation solutions
Azure Monitor
What is Microsoft Sentinel?
Sentinel as SaaS
Sentinel Architecture
Deployment Prerequisites
Demo: Create an Azure Resource Group
Demo: Create a Log Analytics Workspace

Demo: Create a Sentinel Workspace 1 sessions

Demo: Create a Sentinel Workspace
Azure RBAC
Sentinel RBAC
Demo: Azure RBAC for Sentinel
Dedicated Cluster
Data Connectors
Typical data sources for a SIEM
Demo: Content Hub
Demo: Ingesting Threat Intelligence into Sentinel
Demo: Verify Threat Intelligence Log Ingestion
Demo: Ingesting Entra ID into Sentinel
Demo: Verify Entra ID Ingestion

Demo: Deploy Sentinel Training Lab 1 sessions

Demo: Deploy Sentinel Training Lab
AMA and DCR
Demo: Ingesting Windows Security Event Logs with AMA and DCR
Sentinel Workflow
Analytic Rules
Scheduled Analytic Rules
Demo: Scheduled Analytic Rules Entra ID
Demo: Scheduled Analytic Rules Windows Security Events
NearRealTimeRules (NRT)
Fusion
ML Behaviour Analytics
Threat Intelligence Rules

Microsoft Security Rules 5 sessions

Microsoft Security Rules
Demo: Incident Dashboard
Ingestion Delay
Demo: Countering Ingestion Delay
What is Threat Hunting?
KQL 101
Demo: KQL Playground
Demo: KQL search
Demo: KQL where
Demo: KQL datetime & timespans
Demo: KQL count, dcount, summarize & top
Demo: KQL order, sort, take

Download Full Curriculum

Batch Schedule

⚡ Seats filling fast — only 5 remaining across all batches

Available Batches
Batch Type	Schedule	Duration	Next Start Date	Availability
Weekend	Sat & Sun, 10am–1pm	10 weeks	15 Aug 2026	Available
Weekday	Mon–Fri, 7–9pm	8 weeks	17 Aug 2026	Available
Fast-track	Mon–Sun, 6 hours/day	2 weeks	24 Aug 2026	Only 5 seats left

Ready to Get Started?