Capability Development / Cyber Security
Implement End-to-End Security for Cloud and AI (SC-500)
This program prepares security professionals to design, implement, and manage end-to-end security controls across Microsoft Azure, Microsoft 365, hybrid environments, and AI-enabled workloads. It covers identity protection, access control, cloud infrastructure security, threat detection, compliance, and security posture management using Microsoft security platforms. Participants gain hands-on skills to secure identities, applications, data, networks, compute resources, and AI solutions aligned to the Cloud and AI Security Engineer role.
Program Overview
This program prepares security professionals to design, implement, and manage end-to-end security controls across Microsoft Azure, Microsoft 365, hybrid environments, and AI-enabled workloads. It covers identity protection, access control, cloud infrastructure security, threat detection, compliance, and security posture management using Microsoft security platforms. Participants gain hands-on skills to secure identities, applications, data, networks, compute resources, and AI solutions aligned to the Cloud and AI Security Engineer role.
Audience Profile
Cloud and AI security engineers; Azure and Microsoft 365 security administrators; Security architects and governance professionals; Candidates preparing for advanced Microsoft security certifications; and Working knowledge of Azure and Microsoft Entra ID recommended.
Course Syllabus
Module 1: Secure Access to Resources Using Microsoft Entra ID
Topics
- Identity protection and secure authentication
- Multi-factor and passwordless sign-in
- Conditional Access by user, device, risk, and location
- Role-based access control and least privilege
- Privileged Identity Management and just-in-time access
- Access reviews for users, groups, guests, and apps
- Azure Key Vault key, secret, and certificate management
- Sensitive operation alerts and logging
Module 2: Secure Azure Infrastructure and Cloud Workloads
Topics
- Virtual network segmentation and secure routing
- Network security groups and firewall rules
- Private access and traffic inspection
- Storage account and database security
- Encryption and authentication controls
- VM and container hardening
- Patch management and vulnerability remediation
- Microsoft Defender for Cloud workload protection
Module 3: Security Governance, Compliance & Posture Management
Topics
- Secure score review and risk prioritization
- Cloud posture improvement and exposure management
- Security policies and compliance controls
- Regulatory dashboards and audit readiness
- Defender XDR and Defender for Cloud alert triage
- Incident investigation and containment
- Microsoft Sentinel data connectors and analytics rules
- Automation rules, playbooks, and centralized SOC monitoring
Module 4: Secure AI Solutions and Modern Security Operations
Topics
- AI identity, data, and infrastructure protection
- Model and API access control
- Data leakage monitoring
- Secure AI application design
- Data classification and access control
- Microsoft Security Copilot for investigation and hunting
- Responsible AI usage in security operations
- End-to-end identity, data, and compute controls

