Skip to content

Azure security

Securing Azure the way it actually works: the two identity planes (Entra directory roles vs Azure RBAC) with PIM and Conditional Access, managed identities over client secrets, NSG/ASG segmentation and Azure Firewall egress control, Private Endpoints, Key Vault and customer-managed keys, Defender for Cloud plus Microsoft Sentinel, Azure Policy landing zones, and a rehearsed incident-response runbook.

Advanced5 sections · 15 lessons · ~9h total · 60-question self-test

01

Entra ID & RBAC

3 lessonsTest yourself

01Entra ID, Conditional Access & PIMTwo identity planes, adaptive sign-in, just-in-time roles.35 min 02Azure RBAC, scope & deny assignmentsInheritance, the roles that grant access, deny wins.35 min 03Managed identities & SP escalationKill client secrets; watch credential injection.35 min

02

Network security & segmentation

3 lessonsTest yourself

01NSGs, ASGs & no public managementIdentity-aware rules, Bastion/JIT, flow logs.30 min 02Azure Firewall & egress controlCentral FQDN allowlists, threat intel, IDPS.35 min 03Private Endpoints & no public PaaSPrivate IPs and disabling public access.30 min

03

Key Vault & encryption

3 lessonsTest yourself

01Key Vault access & recoveryRBAC data plane, purge protection, private vaults.35 min 02CMK, Managed HSM & at-restOwn the key, the rotation, and the kill switch.30 min 03Secrets, references & rotationRuntime fetch by identity, overlap rotation.30 min

04

Defender for Cloud & Sentinel

3 lessonsTest yourself

01Defender for Cloud: CSPM + CWPPSecure Score, workload protection, org-wide.30 min 02Microsoft Sentinel SIEM/SOARAnalytics rules, UEBA, playbooks that respond.35 min 03Activity Log & immutable trailsDiagnostic settings to a locked, central store.30 min

05

Governance & incident response

3 lessonsTest yourself

01Azure Policy & effectsDeny, deployIfNotExists, initiatives at scale.30 min 02Management groups & landing zonesInherited guardrails, secure-by-default subscriptions.30 min 03Incident response & forensicsRevoke sessions, isolate, snapshot, hunt persistence.35 min

Progress is saved in this browser only — no account required.

Final exam

Test yourself on everything

60 questions drawn from all 5 sections — every answer explained as you pick.

Start final exam