We may earn an affiliate commission when you visit our partners.
Course image
John Christopher

Have access to the following:

  • Training from an instructor of over 20 years who has trained thousands of people and also a Microsoft Certified Trainer

  • Lecture that explains the concepts in an easy to learn method for someone that is just starting out with this material

  • Instructor led hands on and simulations to practice that can be followed even if you have little to no experience

Enroll now

What's inside

Learning objectives

  • Learn the concepts and perform hands on activities needed to pass the az-500 exam
  • Gain a tremendous amount of knowledge involving securing microsoft azure services
  • Get loads of hands on experience with securing microsoft azure services
  • Utilize hands on simulations that can be access anytime, anywhere!

Syllabus

Introduction
Welcome to the course!
Understanding the Microsoft 365 and Azure Environment
Having a Solid Foundation of Active Directory Domains
Read more

Save this course

Create your own learning path. Save this course to your list so you can find it easily later.
Save

Career center

Learners who complete AZ-500 Microsoft Azure Security Technologies with SIMS will develop knowledge and skills that may be useful to these careers:
Cloud Security Engineer
A Cloud Security Engineer is at the forefront of protecting an organization's cloud infrastructure and data. This role involves designing, implementing, and managing robust security controls within cloud environments, specifically Microsoft Azure. Learners taking this course will gain extensive hands-on experience and foundational knowledge in securing Azure services, which is directly applicable to the daily tasks of a Cloud Security Engineer. The course's focus on identity and access management with Entra ID, network security configurations, threat protection using Microsoft Defender for Cloud, and centralized policy management with Azure Policy are all core competencies for success in this critical field.
Identity and Access Management Specialist
An Identity and Access Management Specialist focuses on controlling who has access to what resources within an organization's IT landscape. In an Azure environment, this role is critical for securing user identities and ensuring appropriate authorization. This course offers in-depth instruction on managing identities in Entra ID, configuring Privileged Identity Management PIM for just in time access, implementing Conditional Access policies including multifactor authentication, and utilizing Entra Identity Protection. Learners will also gain experience with passwordless authentication and access reviews. This specialized knowledge makes the course exceptionally relevant for anyone pursuing or advancing a career as an Identity and Access Management Specialist.
Azure Security Architect
An Azure Security Architect designs and plans the security posture for an organization's operations within Microsoft Azure. This includes creating comprehensive security frameworks, defining policies, and ensuring that all Azure deployments meet stringent security and compliance requirements. This course provides an invaluable foundation, covering key architectural components such as identity management through Entra ID, advanced network security implementation, and the strategic deployment of threat protection solutions like Microsoft Sentinel. For an aspiring Azure Security Architect, the detailed understanding of Azure roles, custom policies, and encryption methods provided by this course is crucial for building resilient and secure cloud architectures.
Technical Trainer Cloud Security
A Technical Trainer Cloud Security specializes in educating others on cloud security technologies and best practices. Given that this course is taught by an experienced Microsoft Certified Trainer and focuses on gaining knowledge to pass the AZ 500 exam, it serves as an excellent foundational experience for aspiring trainers. The course content, encompassing identity management, network security, threat protection, and policy management in Azure, provides comprehensive subject matter expertise. Learning through instructor led hands on activities and simulations mirrors ideal training methodologies. This course offers both the technical depth and exposure to effective teaching approaches beneficial for a Technical Trainer Cloud Security.
Security Operations Center Analyst
A Security Operations Center Analyst is responsible for monitoring, detecting, analyzing, and responding to security incidents and threats. Within an Azure context, this involves utilizing cloud native security tools to maintain a vigilant watch over the environment. This course provides highly relevant modules on configuring and managing security monitoring solutions, including creating and customizing alert rules using Azure Monitor, configuring diagnostic logging, and implementing Microsoft Sentinel. The hands on simulations, such as running failed login attempt queries in Sentinel, directly prepare learners for the practical responsibilities of a Security Operations Center Analyst, equipping them to identify and address security concerns proactively.
Network Security Engineer
A Network Security Engineer designs, implements, and maintains secure network infrastructures. For organizations leveraging Microsoft Azure, this role requires expertise in securing cloud based networks. This course dedicates significant attention to advanced network security, covering the creation and configuration of virtual networks and subnets, implementing Azure Firewall, understanding Azure Application Gateway and Front Door with Web Application Firewall WAF, and utilizing Azure Service Endpoints and Private Endpoints. Learners will also explore Azure DDoS Protection. This comprehensive training provides the specific, hands on skills needed to excel as a Network Security Engineer focused on safeguarding Azure network connectivity.
Incident Response Specialist
An Incident Response Specialist is on the front lines, responding to and mitigating active cyber security incidents to minimize damage and restore normal operations. Expertise in cloud security tools is paramount for this role in today's landscape. This course directly addresses critical areas for an Incident Response Specialist, including configuring and managing threat protection using Microsoft Defender for Cloud, evaluating vulnerabilities, and implementing Microsoft Sentinel for effective security monitoring and log analysis. Understanding how to interpret alert rules, analyze diagnostic logs, and utilize Sentinel to investigate incidents in Azure are core skills reinforced through the course's hands on approach and simulations.
DevSecOps Engineer
A DevSecOps Engineer integrates security practices throughout the entire software development and deployment lifecycle, ensuring security is shifted left. While the course focuses on Azure security technologies, its principles are highly applicable. Understanding how to manage application access, integrate single sign on, create app registrations, and configure API permissions are vital for securing cloud native applications. Furthermore, configuring security for container services, serverless compute, and Azure App Service, as covered in the course, directly supports a DevSecOps Engineer's goal of building inherently secure applications and infrastructure in Azure.
Security Consultant
A Security Consultant advises organizations on various aspects of cybersecurity, often helping them design, implement, and improve their security strategies. Expertise in specific cloud platforms like Microsoft Azure is highly sought after. This course provides a comprehensive overview of Azure Security Technologies, which enables a Security Consultant to offer informed recommendations. Topics such as managing identities, implementing advanced network security, configuring centralized policy management, and understanding threat protection solutions allow a consultant to guide clients effectively in securing their Azure environments and achieving compliance goals.
Information Security Analyst
An Information Security Analyst works to protect an organization's information systems and data from cyber threats. This broad role often involves vulnerability assessments, incident response planning, and ensuring compliance with security policies. This course provides a strong foundation by immersing learners in Microsoft Azure Security Technologies, which are increasingly central to modern enterprise security. The ability to configure centralized policy management with Azure Policy, understand threat protection via Microsoft Defender for Cloud, and manage security monitoring solutions allows an Information Security Analyst to effectively apply security principles within an Azure centric environment.
IT Auditor
An IT Auditor assesses an organization's IT infrastructure, processes, and controls to ensure they comply with internal policies, industry standards, and regulatory requirements. For cloud environments, a deep understanding of cloud specific security controls is vital. This course provides an IT Auditor with detailed insight into Microsoft Azure Security Technologies. The ability to interpret role and resource permissions, configure security settings and auditing using Azure Policy, and understand security monitoring solutions like Azure Monitor and Microsoft Sentinel are directly applicable. This knowledge helps an IT Auditor effectively evaluate the security posture and compliance of Azure deployments.
Compliance Analyst
A Compliance Analyst ensures that an organization adheres to relevant laws, regulations, and industry standards. In cloud environments, this requires understanding how cloud services can be configured to meet compliance requirements. This course offers a Compliance Analyst practical knowledge of Microsoft Azure Security Technologies, particularly in areas like configuring centralized policy management with Azure Policy, managing access control, and implementing security settings and auditing. This understanding helps a Compliance Analyst assess Azure deployments against various mandates and ensure that security configurations contribute to the organization's overall compliance posture.
Cloud Engineer
A Cloud Engineer is responsible for designing, deploying, and managing cloud based infrastructure and services. While not exclusively a security role, a fundamental understanding of security is non negotiable for building resilient and compliant cloud solutions. This course equips a Cloud Engineer with essential knowledge in securing Microsoft Azure Services. Topics such as managing identities, configuring access control, implementing advanced network security, and understanding encryption at rest and in transit are critical for any Cloud Engineer creating secure Azure environments. The foundational principles covered enhance a professional's ability to build secure by design cloud solutions.
Data Security Engineer
A Data Security Engineer specializes in protecting sensitive data throughout its lifecycle at rest, in transit, and in use. In cloud environments like Azure, this requires specific knowledge of cloud data protection mechanisms. This course provides a Data Security Engineer with a solid understanding of how to configure encryption at rest and in transit within Azure. It also covers securing various Azure services that store or process data, such as storage accounts and SQL databases, through specific security features like Microsoft Defender for SQL. This foundational knowledge is key to implementing comprehensive data protection strategies in Azure.
Application Security Engineer
An Application Security Engineer focuses on securing software applications from design to deployment. In the context of cloud native applications on Azure, this involves understanding how to secure the underlying platform. This course covers critical aspects such as managing application access, creating app registrations, configuring permission scopes, and managing API permissions to Azure resources. Additionally, topics like configuring security for container services, serverless compute, and Azure App Service provide specific guidance on securing the platforms where modern applications reside, enhancing their overall security posture.

Reading list

We've selected 50 books that we think will supplement your learning. Use these to develop background knowledge, enrich your coursework, and gain a deeper understanding of the topics covered in AZ-500 Microsoft Azure Security Technologies with SIMS.
Provides a comprehensive guide to Azure for security professionals. It covers topics such as Azure security architecture, threat modeling, and incident response. It valuable resource for Azure administrators and security professionals.
Serves as the flagship architectural and operational guide to Microsoft Sentinel, walking SOC engineers through Log Analytics workspace design, data connector ingestion, Kusto Query Language (KQL) analytics rules, incident investigation graphs, and Logic Apps SOAR playbooks.
Dissects every major MFA mechanism, from SMS and TOTP tokens to push approvals, biometrics, and FIDO2 hardware keys, through an attacker's lens. Security engineers learn how adversaries bypass weak factors via SIM swapping, Adversary-in-the-Middle phishing, and push fatigue, and how to deploy phishing-resistant authentication.
Equips SOC analysts and detection engineers with fluency in Kusto Query Language (KQL), translating Microsoft Sentinel telemetry tables into high-fidelity analytics rules, custom threat-hunting queries, workbooks, and automated detections.
Authored by W3C editor and OAuth Working Group contributor Aaron Parecki, this crystal-clear engineering handbook walks architects through Authorization Code with PKCE, client credentials, token validation, and native mobile app flows.
Co-authored by a core OAuth specification editor, it demystifies the delegated authorization framework powering modern federated login and token-based MFA. Developers master access tokens, refresh workflows, PKCE, threat modeling, and server implementations without falling into common token-leakage traps.
Ross Anderson's landmark systems-security treatise anchors authentication within real-world socio-technical systems. Dedicated chapters examine passwords, biometrics, smartcards, hardware security modules, access control, and human usability failures across banking, enterprise, and consumer infrastructure.
This core book for anyone focusing on the administrative aspects of Microsoft Entra ID, aligning directly with the SC-300 certification exam objectives. It dives deep into implementing and managing identities, authentication, authorization, and identity governance. It must-read for those pursuing an Identity and Access Administrator role and serves as a key reference tool.
Walks engineers step by step through implementing user authentication with OpenID Connect atop OAuth 2.0 across web apps, SPAs, mobile clients, and microservices. Covers ID token validation, claims, session management, federation, and integrating strong MFA checks into modern login pipelines.
Walks security operations practitioners step by step through the Microsoft SC-200 blueprint, detailing Microsoft Sentinel workspace provisioning, data connectors, analytics rule tuning, incident response automation, and Defender XDR integration.
Updates the seminal O'Reilly Zero Trust blueprint for cloud-native environments, showing why perimeter firewalls must give way to continuous cryptographic verification. Explains how phishing-resistant MFA, device attestation, and mutual authentication anchor the control plane for every network request.
Prabath Siriwardena and Nuwan Dias bridge edge identity (OIDC/OAuth2 at the API Gateway) with east-west service mesh IAM, demonstrating JWT propagation, SPIFFE/SPIRE workload identity, and Open Policy Agent (OPA) authorization.
Translates battle-tested Security Operations Center doctrine into structured SIEM correlation workflows, telemetry onboarding priorities, alert triage metrics, and threat-hunting playbooks directly applicable to Microsoft Sentinel rules.
Provides hands-on patterns for securing modern APIs where traditional session cookies fail. Engineers learn cryptographic token authentication, JWT and Macaroon designs, mutual TLS, OAuth 2.0 scopes, and capability-based access controls to enforce strong identity verification between services.
Another excellent resource for preparing for the SC-300 certification, this guide focuses on implementing IAM solutions with Azure AD (Entra ID) and building an identity governance strategy. It complements the Exam Ref by potentially offering different perspectives or practice materials.
Bridges OAuth 2.0 and OpenID Connect with Zero Trust data protection in distributed cloud-native and Kubernetes workloads. Demonstrates token exchange, fine-grained authorization, workload identity, and resilient authentication boundaries so sensitive APIs verify both human users and automated services.
A more in-depth exploration than 'Network Security Essentials,' this book delves into the theory and practice of cryptography and network security. It covers a wide range of topics, from encryption algorithms to network security applications. comprehensive resource often used as a textbook for undergraduate and graduate-level courses.
Connects endpoint, identity, and email XDR telemetry directly to Microsoft Sentinel's unified security operations workflow, showing practitioners how to correlate alerts, hunt with KQL across Defender tables, and automate response playbooks.
This study guide provides focused content, practice questions, and labs specifically for the SC-300 exam. It is highly practical and helps solidify understanding through hands-on exercises. It's a valuable tool for exam preparation and gaining practical configuration experience with Microsoft Entra ID.
Equips practitioners with the applied cryptographic intuition needed to evaluate authentication protocols without getting lost in abstract proofs. Covers HMAC, key derivation, elliptic-curve signatures, and TLS fundamentals that directly power TOTP generators, FIDO2 keys, passkeys, and secure tokens.
Delving into enterprise federation and financial-grade identity, Prabath Siriwardena unpacks Mutual TLS token binding, UMA (User-Managed Access), XACML attribute-based access control, and identity brokerage patterns.
Establishes a repeatable detection-as-code lifecycle for cloud SIEM teams, guiding engineers from adversary emulation and MITRE ATT&CK mapping through automated rule validation, false-positive suppression, and version-controlled analytics.
Deepens practical mastery of Public Key Infrastructure, X.509 certificates, and Transport Layer Security for engineers deploying certificate-based MFA and mutual TLS. Explains trust chains, certificate revocation, key storage, and common TLS misconfigurations that undermine strong authentication.
Teaches threat hunters how to operationalize STIX/TAXII intelligence feeds, formulate hypothesis-driven hunting campaigns aligned to MITRE ATT&CK, and query endpoint and cloud logs to uncover stealthy adversary persistence.
Practical guide to building and operating a network security monitoring (NSM) capability. It covers data collection, detection techniques, and analysis. It's an essential resource for security analysts and anyone responsible for monitoring network traffic for malicious activity.
Guides web developers through the full stack of modern browser and server authentication standards, including FIDO2, WebAuthn, OAuth 2.0, OpenID Connect, and SAML. Connects cryptographic building blocks to practical passkey registration, assertion verification, and federated single sign-on flows.
Structured around core information security curricula, this foundational text compares Discretionary (DAC), Mandatory (MAC), Role-Based (RBAC), and Attribute-Based Access Control (ABAC) alongside Kerberos and LDAP directory services.
Covers identity and access management within the context of Microsoft 365 security and compliance. It is highly relevant for M365 administrators and security professionals, detailing how Entra ID features like Conditional Access and hybrid identity are used in a Microsoft 365 environment. It provides a broader perspective on identity's role in enterprise security.
Focuses on the crucial aspect of network security monitoring (NSM). It teaches readers how to collect and analyze network data to detect and respond to intrusions. It's a practical guide suitable for those interested in defensive security and incident response, offering valuable insights for both beginners and experienced professionals.
Offers a practical introduction to penetration testing and ethical hacking. It guides readers through the process of identifying and exploiting vulnerabilities in networks and systems. It hands-on guide suitable for those interested in offensive security and understanding how attackers operate.
Focused on developers, this book explains how to use Azure AD (now Entra ID) to secure applications. It covers modern authentication techniques and practical implementation with code examples. It is crucial for developers building applications that integrate with Microsoft identity and provides deep insight into the developer aspects of Entra ID.
Privileged Access Management (PAM) veterans Morey Haber and Darran Rolls examine how attackers exploit credential stuffing, Kerberoasting, golden tickets, and orphaned service accounts—and how PAM vaults and just-in-time access stop them.
Applies the Cyber Kill Chain and Diamond Model methodologies to pivoting across indicators of compromise, enriching SIEM alerts with adversary infrastructure context, and orchestrating structured incident response campaigns.
Based on real bug bounty reports, this book offers practical insights into finding vulnerabilities in web applications. It's a valuable resource for aspiring bug bounty hunters and those interested in learning about common web security flaws through real-world examples.
Cloud infrastructure security starts and ends with AWS IAM; Dylan Shields teaches engineers how to author least-privilege JSON policy documents, assume STS cross-account roles, enforce Service Control Policies (SCPs), and prevent privilege escalation.
Frames proactive threat hunting as a disciplined, hypothesis-driven practice for modern cloud SIEM teams, walking analysts through telemetry pivoting, behavioral anomaly detection, and repeatable hunt execution across enterprise logs.
Delivers a rigorous academic treatment of cryptographic authentication and key-exchange protocols for security researchers and protocol designers. Analyzes challenge-response mechanisms, multi-factor key agreement, formal security models, and subtle protocol flaws across historical and modern standards.
Provides a foundational understanding of security, compliance, and identity concepts within Microsoft 365 and Azure, with a significant focus on Microsoft Entra ID. It is ideal for those new to the topic or preparing for the SC-900 certification. It serves as excellent prerequisite reading for more advanced Entra ID subjects.
Hybrid enterprise IAM requires seamless synchronization between on-premises Active Directory Domain Services (Kerberos/LDAP) and cloud Microsoft Entra ID (Azure AD) via federation and password hash sync.
Offers an operational, vendor-neutral playbook for planning and rolling out enterprise MFA across hybrid cloud, SaaS, and on-premises infrastructure. Compares SMS, OTP, push notifications, biometrics, and WebAuthn factors while addressing enrollment, fallback recovery, and help-desk troubleshooting.
Situates Microsoft Sentinel within the broader Azure cloud defense architecture, detailing how Defender for Cloud, Entra ID audit streams, network security logs, and policy guardrails reinforce centralized SIEM visibility.
Co-authored by Keycloak's creator, it shows developers how to deploy an open-source identity provider supporting OIDC, SAML, and FIDO2/WebAuthn out of the box. Covers configuring step-up authentication flows, passkey policies, identity brokering, and custom SPI extensions for real applications.
Guides security architects through unifying Microsoft Defender XDR and Microsoft Sentinel into a single SecOps platform, covering Zero Trust alignment, unified incident correlation, automated remediation, and KQL hunting workflows.
Provides Microsoft's official architectural blueprint for planning and deploying Microsoft Sentinel, addressing multi-workspace governance, Log Analytics cost optimization, ASIM schema normalization, and SOAR automation patterns.
NIST researchers Ferraiolo, Kuhn, and Chandramouli formalized the ANSI/NIST RBAC standard that underpins every modern enterprise IAM role hierarchy, separation-of-duty constraint, and entitlement review system.
Illustrates how enterprise network and cloud architects enforce Zero Trust identity boundaries at scale across hybrid infrastructure. Connects strong authentication, micro-segmentation, automation, and post-quantum readiness into resilient architectures that limit lateral movement after credential compromise.
Phillip Windley establishes the enduring conceptual taxonomy of digital identity: namespaces, enrolment proofing, directory meta-directories, lifecycle de-provisioning, and privacy governance.

Share

Help others find this course page by sharing it with your friends and followers:

Similar courses

Here are nine courses similar to AZ-500 Microsoft Azure Security Technologies with SIMS.
Cloud-Based Network Design & Management Techniques
Most relevant
Foundations of Cybersecurity Operations
Most relevant
Design security solutions for applications and data
Most relevant
pfSense 2.4.4: Open Source Firewall
Most relevant
Network Security, Troubleshooting, & Certification Prep
Most relevant
Cloud Computing Security - Master's
Most relevant
Security Architecture & Operations
Most relevant
CCNP ROUTE 300-101 Video Boot Camp With Chris Bryant
Most relevant
Microsoft Entra ID (formerly Azure AD) administration...
Most relevant

Udemy Buyer Protection & Guarantee

Verified partner policies & purchase protections

Global Marketplace Leader
Free Trial & Audit

Free Lecture Previews

Free preview video lectures available for all courses; optional 7-day free trial on Personal Plan subscriptions (cancel before trial ends to avoid conversion).

Return & Refund Policy

30-Day Money-Back Guarantee

30-day money-back guarantee on all eligible individual course purchases (provided course content has not been substantially consumed or downloaded). Subscription fees are non-refundable once billed.

Buyer Protections

Verified Academic & Industry Partner

Lifetime access to purchased individual courses and future updates, verifiable certificate of completion, and direct student Q&A forums.

Key Purchase Protections
30-day 100% money-back guarantee on course purchases
Lifetime access on web, mobile, and offline
Certificate of completion included with purchase
Direct instructor Q&A and active student community
OpenCourser Verified Partner Policy details last reviewed: 2026-10-22
Our mission

OpenCourser helps millions of learners each year. People visit us to learn workspace skills, ace their exams, and nurture their curiosity.

Our extensive catalog contains over 50,000 courses and twice as many books. Browse by search, by topic, or even by career interests. We'll match you to the right resources quickly.

Find this site helpful? Tell a friend about us.

Affiliate disclosure

We're supported by our community of learners. When you purchase or subscribe to courses and programs or purchase books, we may earn a commission from our partners.

Your purchases help us maintain our catalog and keep our servers humming without ads.

Thank you for supporting OpenCourser.

© 2016 - 2025 OpenCourser