Microsoft SC-500T00 - Implement End to End Security Controls for Cloud and AI Workloads

Course subjects

Secure Access to Resources by Using Microsoft Entra

• Manage and Implement Authentication Methods in Microsoft Entra ID

• Implement and Configure Privileged Identity Management (PIM)

• Authenticate Your API Plugin for Declarative Agents with Secured APIs

Secure Azure Key Vault with Defense in Depth for the Cloud and AI Workloads

• Configure and Secure Azure Key Vault

• Manage Keys and Secrets in Azure Key Vault

• Manage Certificates and Monitor Azure Key Vault

• Protect Azure Key Vault with Microsoft Defender for Cloud

Enforce Security Governance and Regulatory Compliance

• Enforce Governance with Azure Policy and Resource Locks

• Configure Security Controls and Remediate Recommendations in Defender for Cloud

• Evaluate Regulatory Compliance in Defender for Cloud

• Manage and Right-Size RBAC Role Assignments for Least Privilege

• Protect Backup Data with Azure Backup Security Features

• Implement Security Controls in Infrastructure as Code

Implement Security for Azure Storage for the Cloud and AI Security Engineer

• Describe Azure Storage Services

• Implement Security and Manage Access for Azure Storage

• Configure Network Security for Azure Storage

• Implement Microsoft Defender for Storage

Implement Security for Azure SQL Databases

• Configure Platform-Level Security for Azure SQL

• Configure Auditing for Azure SQL Database and Azure SQL Managed Instance

• Implement Microsoft Defender for Databases

Implement Network Security Controls in Azure

• Segment and Isolate Azure Workloads Using Network Security Controls

• Centralise and Enforce Traffic Inspection Using Azure Firewall

• Secure Remote and Hybrid Connectivity Using VPN Gateways and Microsoft Entra Private Access

• Eliminate Public Network Exposure of Azure PaaS Services

Implement Security for AI

• Secure Access for Microsoft Entra Agent Identity

• Analyze AI Identity Risks Using Microsoft Defender XDR

• Enable Real-Time Protection for Copilot Studio Agents

• Configure AI Gateway Security in Microsoft Foundry

• Configure and Manage Guardrails in Microsoft Foundry

• Protect AI Workloads with Microsoft Defender for Cloud

• Enable Defender for AI Services Workload Protection in Microsoft Defender for Cloud

• Manage Agents Using Microsoft Agent 365

• Identify AI Data Risks Using Microsoft Purview Data Security Posture Management

Implement Security for Servers and Virtual Machines

• Implement Disk Encryption for Azure Virtual Machines

• Configure Trusted Launch Security Features for Azure Virtual Machines

• Plan and Implement Azure Bastion

• Manage Security for Arc-Enabled Hybrid Servers

• Implement Microsoft Defender for Servers

• Enable and Enforce Just-in-Time VM Access

• Enforce VM Security Configuration with Azure Machine Configuration

Secure Azure Application Platform Services for the Cloud and AI Security Engineer

• Detect Container Risks Using Microsoft Defender for Containers

• Implement Security Controls for Azure Kubernetes Service

• Implement Security Controls for Azure Container Registry, Container Instances, and Container Apps

• Implement Security Controls for Azure Function Apps and Logic Apps

• Implement Security Controls for Azure App Services and Web Application Firewall

• Implement API Backend Security Using Azure API Management

Manage Security Posture by Using Microsoft Defender for Cloud

• Connect Hybrid and Multicloud Environments to Microsoft Defender for Cloud

• Identify Security Risks by Using Cloud Security Posture Management

• Discover Unprotected Assets and Vulnerabilities by Using Microsoft Defender External Attack Surface Management

• Evaluate Regulatory Compliance in Defender for Cloud

• Enable and Configure Workload Protection Plans in Microsoft Defender for Cloud

• Configure Microsoft Defender Vulnerability Management Settings for Azure VMs

Implement Activity and Event Collection in Microsoft Sentinel

• Create and Manage Microsoft Sentinel Workspaces

• Manage Content in Microsoft Sentinel

• Connect Microsoft Services to Microsoft Sentinel

• Connect Syslog Data Sources to Microsoft Sentinel

• Connect Common Event Format Logs to Microsoft Sentinel

• Connect Windows Hosts to Microsoft Sentinel

• Implement Automation Rules and Playbooks in Microsoft Sentinel

• Manage Data Storage and Query Audit Logs in Microsoft Sentinel

Deploy and Operate Microsoft Security Copilot

• Describe Microsoft Security Copilot

• Configure Workspaces for Microsoft Security Copilot

• Manage Plugins and Agents in Microsoft Security Copilot