We may earn an affiliate commission when you visit our partners.
Course image
Whizlabs Instructor

You’ll explore secure cloud application development practices, enforce strong identity controls with Microsoft Entra ID, and leverage Microsoft Defender for Cloud to safeguard workloads. The course also covers encryption at rest and in transit, key management with Azure Key Vault, data residency considerations, and governance strategies using Data Lifecycle Management (DLM).

Read more

You’ll explore secure cloud application development practices, enforce strong identity controls with Microsoft Entra ID, and leverage Microsoft Defender for Cloud to safeguard workloads. The course also covers encryption at rest and in transit, key management with Azure Key Vault, data residency considerations, and governance strategies using Data Lifecycle Management (DLM).

The course delivers 6–7 hours of targeted video lectures that combine theoretical insights with hands-on demonstrations, demos, and real-world security design scenarios. Organized into two core modules, each includes quizzes and in-video assessments to validate understanding.

Enroll in “Design Security Solutions for Applications and Data” to gain the skills required to design secure, compliant, and resilient application and data protection strategies in Microsoft’s cloud ecosystem.

Who Should Take This Course?

Application Security Engineers & Cloud Developers

Data Protection and Compliance Specialists

Microsoft 365 and Azure Security Administrators

Security Architects preparing for the SC-100 exam

Course Modules:

Microsoft Defender for Cloud to Protect Cloud Applications

Microsoft Cloud Data Protection and Governance

By the end of this specialization, you will:

Master secure application design aligned with Microsoft’s security frameworks

Implement encryption, classification, and governance for sensitive data

Integrate identity-first strategies into application and data security design

Be fully prepared to take and pass the SC-100 certification exam

Enroll now

What's inside

Syllabus

Microsoft Defender for Cloud to Protect Cloud Applications
Welcome to Week 1 of the course! In this module, you’ll explore how to design and protect modern cloud-native applications using Microsoft Defender for Cloud and Entra ID. You’ll start by examining security considerations in cloud application development, followed by secure coding practices and vulnerability management. Then, you’ll learn how identity and access management plays a central role in securing apps with Microsoft Entra ID. Through practical demos, you’ll see how Defender for Cloud enhances application-level security and how data classification and sensitivity labels help manage information access. By the end of this week, you’ll be equipped with essential skills to build secure applications, apply access controls, and classify sensitive data to reduce risk and ensure compliance.
Read more

Save this course

Create your own learning path. Save this course to your list so you can find it easily later.
Save

Career center

Learners who complete Design security solutions for applications and data will develop knowledge and skills that may be useful to these careers:
Security Architect
A Security Architect is responsible for designing robust security frameworks and solutions, ensuring an organization's digital assets are protected against evolving threats. This course, "Design Security Solutions for Applications and Data," is intrinsically aligned with the responsibilities of a Security Architect as it focuses on developing expertise to design, implement, and manage secure application and data protection strategies in Microsoft’s cloud ecosystem. Learners will gain proficiency in mastering secure application design aligned with Microsoft’s security frameworks, leveraging Microsoft Defender for Cloud and Entra ID, and implementing encryption and governance for sensitive data. This comprehensive training helps build the foundation required to craft resilient, compliant, and cutting-edge security architectures. Taking this course helps an aspiring Security Architect develop the critical design mindset and technical knowledge essential for creating secure cloud environments.
Identity & Access Management Engineer
An Identity Access Management Engineer specializes in designing, implementing, and maintaining systems that control who can access what within an organization's digital landscape. This role is a core focus of the "Design Security Solutions for Applications and Data" course, which places strong emphasis on enforcing robust identity controls with Microsoft Entra ID. The course will equip learners to master secure identity foundations, explore core identity concepts like users, roles, and access models (RBAC and ABAC), and implement authentication strategies such as MFA and Conditional Access. Furthermore, it delves into identity governance, including provisioning, deprovisioning, and access reviews, which are all critical tasks for an Identity Access Management Engineer. This course helps learners build the practical skills to protect an organization's digital assets through robust identity and access policies.
Data Protection Specialist
As a Data Protection Specialist, you focus on safeguarding sensitive information throughout its lifecycle, ensuring privacy, integrity, and availability. The course, "Design Security Solutions for Applications and Data," is directly relevant, explicitly mentioning "Data Protection and Compliance Specialists" among its target audience. It provides in-depth knowledge on implementing encryption at rest and in transit, key management with Azure Key Vault, and developing strong data residency considerations. Learners will also explore data classification, sensitivity labels, and governance strategies using Data Lifecycle Management (DLM). This course helps aspiring Data Protection Specialists develop the technical skills to implement classification, encryption, and governance for sensitive data, ensuring organizational data remains secure and compliant within Microsoft's cloud ecosystem.
Microsoft Azure Security Administrator
A Microsoft Azure Security Administrator is responsible for implementing, managing, and monitoring security controls, privacy, and compliance within the Microsoft Azure environment. The "Design Security Solutions for Applications and Data" course is specifically tailored for this role, as "Microsoft 365 and Azure Security Administrators" are among its key audience. The course delivers practical expertise in protecting modern cloud-native applications using Microsoft Defender for Cloud and Entra ID. Learners will gain skills in applying access controls and classifying sensitive data to reduce risk and ensure compliance, building robust identity and access policies, and understanding security considerations in cloud application development. This course helps Azure Security Administrators to effectively manage and enhance the security posture of Microsoft cloud resources.
Cloud Security Engineer
A Cloud Security Engineer focuses on designing, building, and maintaining secure cloud environments and infrastructure. The "Design Security Solutions for Applications and Data" course is highly pertinent for this role, as it is expressly designed to equip individuals with the expertise to design, implement, and manage secure application and data protection strategies in Microsoft’s cloud ecosystem. This includes exploring secure cloud application development practices, enforcing strong identity controls with Microsoft Entra ID, and leveraging Microsoft Defender for Cloud to safeguard workloads. Learners will also understand encryption, key management, and data lifecycle governance within Azure. This course helps learners build the necessary skills to engineer secure, compliant, and resilient cloud solutions crucial for a Cloud Security Engineer.
Application Security Engineer
An Application Security Engineer is dedicated to integrating security into the software development lifecycle, ensuring applications are resilient against cyber threats. This course, "Design Security Solutions for Applications and Data," is explicitly designed for "Application Security Engineers." It focuses on secure cloud application development practices, secure coding practices, and vulnerability management. Learners will explore application-level security with Microsoft Defender for Cloud and learn how identity and access management with Microsoft Entra ID plays a central role in securing apps. This course helps the Application Security Engineer to master secure application design aligned with Microsoft’s security frameworks, enabling them to build and protect modern cloud-native applications effectively and reduce risk.
Cybersecurity Consultant
A Cybersecurity Consultant advises organizations on security strategy, risk management, and the implementation of security solutions. The "Design Security Solutions for Applications and Data" course can be highly beneficial for a Cybersecurity Consultant, offering specialized knowledge in designing, implementing, and managing secure application and data protection strategies within the Microsoft cloud ecosystem. Learners will explore secure cloud application development practices, enforce strong identity controls with Microsoft Entra ID, and leverage Microsoft Defender for Cloud. The course also covers encryption, key management, data residency, and governance strategies. This focused expertise can help a Cybersecurity Consultant to provide expert guidance and deliver practical, effective security solutions tailored to modern cloud environments for their clients.
Cloud Compliance Analyst
A Cloud Compliance Analyst ensures that cloud environments and data processing activities adhere to relevant regulations, industry standards, and internal policies. The "Design Security Solutions for Applications and Data" course is highly relevant for this role, as it delves deeply into crucial compliance aspects. Learners will explore data residency considerations, governance strategies using Data Lifecycle Management (DLM), and data classification with sensitivity labels. The course also emphasizes secure access controls and identity-first strategies with Microsoft Entra ID to manage information access and ensure auditable user access. These specific areas help a Cloud Compliance Analyst to understand how to implement and verify the technical controls necessary for maintaining a compliant and secure cloud footprint within the Microsoft ecosystem.
Cloud Solutions Architect
A Cloud Solutions Architect designs and oversees the implementation of an organization's cloud computing strategy, encompassing infrastructure, platforms, and applications. While the role is broad, expertise in security architecture is paramount. The "Design Security Solutions for Applications and Data" course directly supports the security aspects of this role, equipping learners with the expertise to design secure application and data protection strategies in Microsoft's cloud ecosystem. It covers secure cloud application development, strong identity controls with Microsoft Entra ID, and leveraging Microsoft Defender for Cloud to safeguard workloads. This course can help a Cloud Solutions Architect integrate robust security by design into their cloud solutions, ensuring resilience and compliance from the outset, which is a critical differentiator for successful cloud deployments.
DevSecOps Engineer
A DevSecOps Engineer integrates security practices into every phase of the software development and operations lifecycle. The "Design Security Solutions for Applications and Data" course is particularly helpful for this role, as it focuses on secure cloud application development practices and vulnerability management. Learners will explore security considerations in cloud application development and understand how identity and access management with Microsoft Entra ID contributes to securing applications. The course helps DevSecOps Engineers build essential skills to integrate security controls early, apply access controls, and understand data classification to reduce risk in cloud-native applications. This enables the DevSecOps Engineer to automate security and ensure applications are built securely from inception through deployment and operation.
Vulnerability Management Specialist
A Vulnerability Management Specialist identifies, assesses, and prioritizes security weaknesses in systems and applications, then oversees their remediation. The "Design Security Solutions for Applications and Data" course is highly relevant for this specialist. It directly addresses "vulnerability management" and "secure coding practices" as crucial security considerations in cloud application development. Learners will explore how to protect modern cloud-native applications using Microsoft Defender for Cloud, which includes capabilities for identifying and managing threats. The course helps a Vulnerability Management Specialist to understand the attack surface of cloud applications and data within the Microsoft ecosystem, enabling them to effectively identify, classify, and mitigate vulnerabilities to enhance the overall security posture.
Data Privacy Officer
As a Data Privacy Officer, you are responsible for ensuring an organization's adherence to data protection laws and regulations, and for managing privacy risks. The "Design Security Solutions for Applications and Data" course can be highly beneficial for a Data Privacy Officer, offering technical insights into how data is protected and governed in cloud environments. It covers encryption, data residency considerations, data classification, sensitivity labels, and governance strategies using Data Lifecycle Management (DLM). While this role often has a legal and policy focus, grasping these technical implementations is crucial for ensuring compliance. This course helps provide context for a Data Privacy Officer to communicate with technical teams and ensure robust privacy controls are in place. This role typically requires an advanced degree or specific legal certifications.
Information Security Officer
An Information Security Officer holds a strategic leadership role, overseeing an organization's entire information security program, including policy development, risk assessment, and incident response. The "Design Security Solutions for Applications and Data" course provides foundational knowledge that supports the strategic decisions made by an Information Security Officer. It covers designing secure application and data protection strategies in Microsoft’s cloud ecosystem, secure cloud application development, identity controls with Microsoft Entra ID, and data governance. This comprehensive understanding helps an Information Security Officer to guide security strategy, assess the effectiveness of controls, and ensure compliance for cloud-based applications and data. This role typically requires an advanced degree and significant professional experience.
Enterprise Architect Security Focus
An Enterprise Architect with a security focus designs an organization's overall technology blueprint, integrating security principles throughout the enterprise architecture. The "Design Security Solutions for Applications and Data" course can be very helpful for this strategic role. It equips learners with expertise in designing secure application and data protection strategies for the Microsoft cloud ecosystem. This includes mastering secure application design, implementing encryption and governance for sensitive data, and integrating identity-first strategies. This course helps an Enterprise Architect Security Focus to ensure that security is embedded by design in all cloud-native and hybrid environments, allowing them to create a coherent, secure, and resilient enterprise-wide architecture that leverages specific Microsoft security frameworks and tools. This role often requires an advanced degree.
Security Operations Center Analyst
A Security Operations Center Analyst monitors security systems, detects threats, and responds to incidents. The "Design Security Solutions for Applications and Data" course can be helpful for a Security Operations Center Analyst, providing a deeper understanding of how cloud applications and data are intended to be secured. Knowledge gained from the course includes secure cloud application development, the use of Microsoft Defender for Cloud to protect workloads, and the role of Microsoft Entra ID in identity and access management. Understanding these design principles and control implementations helps an analyst to better interpret security alerts, identify anomalous behavior, and effectively investigate incidents related to cloud security, applications, and data within the Microsoft ecosystem.

Reading list

We've selected 50 books that we think will supplement your learning. Use these to develop background knowledge, enrich your coursework, and gain a deeper understanding of the topics covered in Design security solutions for applications and data.
Comprehensive guide to data security, covering topics such as data encryption, access control, and data destruction. It good resource for anyone who wants to learn more about data security best practices.
Covers Azure Key Vault architecture in rigorous detail, including RBAC vs. vault access policies, Managed HSM pools, automated secret and certificate rotation, customer-managed keys (CMK), soft-delete purge protection, and Private Link network isolation.
Offers a practical and accessible approach to data governance by focusing on leveraging existing organizational activities. It emphasizes making progress without striving for immediate perfection, making it valuable for those new to implementing governance programs. It's highly recommended for its plain language and actionable advice.
Bridges.NET cryptographic APIs with cloud key governance, walking engineers through symmetric AES encryption, RSA key pairs, digital signatures, and secure secret retrieval backed by Azure Key Vault and Hardware Security Modules.
This core book for anyone focusing on the administrative aspects of Microsoft Entra ID, aligning directly with the SC-300 certification exam objectives. It dives deep into implementing and managing identities, authentication, authorization, and identity governance. It must-read for those pursuing an Identity and Access Administrator role and serves as a key reference tool.
Guides cloud practitioners through hardening Azure workloads using centralized secret storage, customer-managed encryption keys, Managed Identities, and Microsoft Defender for Cloud telemetry across production subscriptions.
Shows application developers how to eliminate hardcoded credentials in configuration files by pairing system-assigned and user-assigned Managed Identities with the Azure Key Vault SDK and App Configuration references.
Dedicates rigorous hands-on coverage to Azure Key Vault defense in depth, demonstrating RBAC authorization, soft-delete safeguards, Managed HSM deployment, private endpoints, and automated threat monitoring.
Written by an experienced Chief Data Officer, this handbook provides an exhaustive guide to understanding data governance, its components, and positioning solutions for tangible business outcomes. It covers the entire lifecycle of a data governance program with a focus on practical implementation and value creation.
Demystifies the applied cryptographic primitives operating inside cloud key management systems, including Hardware Security Modules (FIPS 140-2/3), envelope encryption, authenticated encryption, key derivation, and PKI certificate chains.
Another excellent resource for preparing for the SC-300 certification, this guide focuses on implementing IAM solutions with Azure AD (Entra ID) and building an identity governance strategy. It complements the Exam Ref by potentially offering different perspectives or practice materials.
A classic in the field, this book provides a comprehensive overview of the data governance lifecycle. It's an excellent starting point for understanding how to design, deploy, and maintain a successful data governance program within an organization. While published in 2012, its foundational principles remain highly relevant.
This study guide provides focused content, practice questions, and labs specifically for the SC-300 exam. It is highly practical and helps solidify understanding through hands-on exercises. It's a valuable tool for exam preparation and gaining practical configuration experience with Microsoft Entra ID.
Updated in 2024 for its second edition, explaining RSA, elliptic-curve cryptography, AES-GCM, cryptographic randomness, and post-quantum readiness so cloud engineers select the right key types and sizes in Key Vault.
Provides a deep dive into the technical aspects of cloud security. It covers topics such as cloud security architectures, security controls, and threat detection and response.
Provides a comprehensive overview of cloud security, covering everything from basic concepts to advanced topics such as threat detection and incident response. It is an excellent resource for anyone who wants to learn more about cloud security.
This framework comprehensive guide to vulnerability management. It provides guidance on all aspects of vulnerability management, from identification to mitigation. It valuable resource for anyone involved in cybersecurity.
Teaches enduring engineering discipline for key generation, pseudorandomness, symmetric modes, and PKI trust hierarchies so security teams configure Azure Key Vault key lifecycles without subtle cryptographic flaws.
Dives into the crucial role of data stewards in a data governance program. It provides actionable guidance on setting up and running a data stewardship effort, including organizing, training, and working with data stewards. The second edition is updated for the Big Data era and international business considerations.
Walks cloud developers through provisioning Azure Key Vault instances, storing application secrets, and integrating secret retrieval seamlessly into Azure Functions, App Service, and CI/CD deployment pipelines.
Covers identity and access management within the context of Microsoft 365 security and compliance. It is highly relevant for M365 administrators and security professionals, detailing how Entra ID features like Conditional Access and hybrid identity are used in a Microsoft 365 environment. It provides a broader perspective on identity's role in enterprise security.
Given the strong regulatory landscape surrounding data, this book provides clear guidance on data protection, privacy, and information law, including GDPR and the Data Protection Act 2018. It's essential for understanding the legal context of data governance and compliance.
A follow-up to the popular 'Non-Invasive Data Governance,' this book offers further experience and perspective on implementing data governance with minimal disruption. It reinforces the practical approach of recognizing and formalizing existing data-related activities. It's valuable for those looking to deepen their understanding of the non-invasive methodology.
Explains how short-lived cryptographic certificates, automated PKI issuance, workload identity attestation, and mutual TLS rely on centralized cloud key vaults to enforce zero-trust service communication.
Unpacks the operational mechanics of X.509 certificates, certificate authorities, OCSP stapling, and private key protection that underpin Azure Key Vault certificate lifecycle automation and mutual TLS.
Offers a practical exploration of approaches to data privacy for technologists. It introduces fundamental concepts and provides examples and code snippets for implementing privacy in practice. It's a valuable resource for understanding how to integrate privacy into data systems, addressing a key contemporary topic in data governance.
Practical guide to vulnerability management for security professionals. It covers all the essential steps involved in vulnerability management, from scanning and assessment to patching and remediation.
Takes a threat-informed approach to vulnerability management. It covers topics such as threat intelligence, threat modeling, and vulnerability assessment.
Given the strong link between data governance and data privacy, this book is highly relevant. It provides practical guidance for engineers on designing and implementing scalable privacy programs, navigating the trade-offs between security and business needs. It covers classifying data, building tools for data discovery, and implementing technical privacy controls.
Provides a foundational understanding of security, compliance, and identity concepts within Microsoft 365 and Azure, with a significant focus on Microsoft Entra ID. It is ideal for those new to the topic or preparing for the SC-900 certification. It serves as excellent prerequisite reading for more advanced Entra ID subjects.
Focusing specifically on data quality, a critical component of data governance, this book offers practical guidance for starting and advancing a data quality program. It addresses common data quality problems and outlines steps for improvement. It's a useful reference for understanding the 'why' and 'how' of data quality management.
Demystifies data governance through pragmatic advice based on real-world experience and research. It offers a case-based approach to understanding and implementing data governance frameworks, making it a practical guide for practitioners facing the complexities of the field.
Illustrates offensive and defensive perspectives on Azure Key Vault, detailing how attackers exploit overly permissive access policies or leaked Managed Identity tokens to dump vault secrets and how defenders audit Diagnostic Logs.
Details how Microsoft Defender for Cloud (formerly Azure Security Center) continuously assesses Key Vault security posture, detects anomalous secret access patterns, and enforces regulatory compliance benchmarks.
Addressing the crucial aspect of data quality within data governance, this book provides techniques to define and assess data quality and ensure effective data collection practices. It's valuable for data professionals dealing with the 'good pipelines, bad data' problem and seeking to build data trust at scale.
Offers a practical, step-by-step approach to data governance applicable across industries. It provides perspectives and practices for effectively managing an organization's data. It's a solid resource for gaining a broad understanding and practical insights.
Offers a step-by-step guide to building a data governance strategy from scratch. It focuses on creating a cross-functional strategy, building a data governance team, and embedding governance into development processes. It's a practical resource for establishing a data-driven culture.
Challenges traditional approaches to data governance and offers a fresh perspective for the modern era. It aims to redefine governance to support data usage rather than restrict it. It's particularly useful for business leaders and team leaders seeking to improve their understanding of contemporary data governance expectations.
Examines how modern cloud architectures enforce workload identity attestation, automated credential rotation via Terraform and Ansible, and quantum-resilient encryption anchored in centralized key management.
Covers the Microsoft 365 Defender suite, which includes Microsoft Defender for Identity. It is essential for understanding how Entra ID signals are used for threat detection and identity protection. It provides insight into the advanced security features that build upon the Entra ID foundation.
Establishes best practices for handling sensitive parameters and dynamically referencing external secret stores like Azure Key Vault during automated Bicep, ARM, and Terraform infrastructure provisioning.
This handbook specifically addresses data governance from the perspective of the Chief Data Officer. It provides insights and guidance for CDOs on leading and implementing data governance within their organizations. It's a valuable resource for those in leadership roles or aspiring to them.
Provides a comprehensive overview of web application security, covering the fundamentals of web application security and common threats and vulnerabilities, making it an excellent resource for beginners.
Provides insights into the evolving role of the Chief Data Officer, a key figure in driving data governance initiatives. It offers practical guidance for CDOs and those working with them, covering data strategy, team building, and the CDO's relationship with data governance. The second edition includes updated perspectives on the CDO landscape.
Provides a roadmap for planning and implementing a data and information quality management program. It offers practical guidance based on research and real-world examples, focusing on making the economic case for data quality and gaining organizational support.
Takes a risk-based approach to vulnerability management. It covers topics such as risk assessment, risk management, and vulnerability prioritization.
Is essential for understanding hybrid identity scenarios involving on-premises Active Directory and Microsoft Entra ID. It provides a deep dive into Active Directory concepts and how they integrate with cloud identities. It is crucial for organizations managing hybrid environments and serves as a valuable reference for AD administrators transitioning to the cloud.
While covering broader Azure administration, this book dedicates significant content to managing Azure identities and governance using Microsoft Entra ID. It valuable resource for aspiring Azure administrators and provides practical knowledge relevant to the AZ-104 certification. It helps solidify understanding of how Entra ID fits into the overall Azure environment.
Provides a hands-on approach to cloud security. It covers topics such as cloud security assessment, cloud security testing, and cloud security incident response.

Share

Help others find this course page by sharing it with your friends and followers:

Similar courses

Here are nine courses similar to Design security solutions for applications and data.
AWS Security – Encryption Fundamentals
Most relevant
(SSCP) Systems Security Certified Practitioner: Unit 6
Most relevant
Cybersecurity Architecture
Most relevant
Cyber Security: DevSecOps
Most relevant
Protecting Cloud Architecture with Alibaba Cloud
Most relevant
Cybersecurity for Everyone
Most relevant
Securing Software, Data and End Points
Most relevant
Increasing Application Security: Bedrock Guardrails &...
Most relevant
Data Encryption using AWS KMS From UST
Most relevant

Coursera Buyer Protection & Guarantee

Verified partner policies & purchase protections

Accredited University Partner
Free Trial & Audit

7-Day Free Trial & Free Audit

7-day free trial on monthly Coursera Plus subscriptions; free audit option available on most individual courses to explore video lectures and readings at no charge.

Return & Refund Policy

14-Day Refund Guarantee

14-day refund window on annual Coursera Plus subscriptions and single-course purchases prior to certificate issuance. Monthly subscriptions do not offer refunds once billed.

Buyer Protections

Verified Academic & Industry Partner

Accredited university and industry certifications (e.g. Stanford, Google, IBM, Yale), secure SSL payment processing, and verifiable digital certificate links.

Key Purchase Protections
14-day refund window on annual Coursera Plus and single courses
7-day free trial on monthly Coursera Plus subscriptions
Free course audit option for lectures and readings
Verified certificates from top universities & companies
OpenCourser Verified Partner Policy details last reviewed: 2026-10-22
Our mission

OpenCourser helps millions of learners each year. People visit us to learn workspace skills, ace their exams, and nurture their curiosity.

Our extensive catalog contains over 50,000 courses and twice as many books. Browse by search, by topic, or even by career interests. We'll match you to the right resources quickly.

Find this site helpful? Tell a friend about us.

Affiliate disclosure

We're supported by our community of learners. When you purchase or subscribe to courses and programs or purchase books, we may earn a commission from our partners.

Your purchases help us maintain our catalog and keep our servers humming without ads.

Thank you for supporting OpenCourser.

© 2016 - 2025 OpenCourser