Identity Protection and Governance 

This course is part of Microsoft Azure Security Engineer Associate (AZ-500) Professional Certificate

Instructor: Microsoft

Access provided by SGCSRC

4,186 already enrolled

4 modules

Gain insight into a topic and learn the fundamentals.

23 reviews

Intermediate level

Recommended experience

2 weeks to complete

at 10 hours a week

Flexible schedule

Learn at your own pace

4 modules

Gain insight into a topic and learn the fundamentals.

23 reviews

Intermediate level

Recommended experience

2 weeks to complete

at 10 hours a week

Flexible schedule

Learn at your own pace

What you'll learn

Explain the features of Azure AD Identity Protection.
Explain how to configure Azure ADPIM and work with Azure AD groups and guests.
Implement and configure Azure policies and RBAC in Azure.
Enable resource locks and deploy blueprints in Azure.

Skills you'll gain

Tools you'll learn

Details to know

Shareable certificate

Add to your LinkedIn profile

Assessments

11 assignments¹

AI Graded see disclaimer

Taught in English

See how employees at top companies are mastering in-demand skills

Learn more about Coursera for Business

logos of Petrobras, TATA, Danone, Capgemini, P&G and L'Oreal

Build your Cloud Computing expertise

This course is part of the Microsoft Azure Security Engineer Associate (AZ-500) Professional Certificate

When you enroll in this course, you'll also be enrolled in this Professional Certificate.

Learn new concepts from industry experts
Gain a foundational understanding of a subject or tool
Develop job-relevant skills with hands-on projects
Earn a shareable career certificate from Microsoft

There are 4 modules in this course

Microsoft Azure provides a comprehensive suite of security tools and services to help you safeguard your organization's data and applications. Identity Protection and governance is the right course for you if you want to become an Azure security engineer.

In this course, you will learn how to protect identities in Azure AD, the core principles of enterprise governance, and Azure role-based access control (RBAC). You will get acquainted with Conditional Access, multifactor authentication (MFA), and other capabilities. You will learn how to plan and configure privilege identity management (PIM). You will also learn how to manage, assign, activate, and approve requests for a privileged access group. You will explore how to investigate and remediate risks. This course will give you an in-depth understanding of the shared responsibility model. You will learn to create policies and configure and deploy access to services using RBAC. You will see how to configure the built-in roles in Azure to control access to Azure resources. Finally, you will learn to monitor, maintain, and protect resources. This is the second course in a series of seven courses that will prepare you to succeed in the AZ-500 exam.

In this module, you will learn how to protect identities in Azure AD using Conditional Access, multifactor authentication (MFA), access reviews, and other capabilities. You will learn how to plan and configure privilege identity management (PIM) for roles and resources. You will also learn how to manage, assign, activate, and approve requests for a privileged access group. You will also learn how to investigate and remediate risks detected by Azure AD Identity Protection.

What's included

20 videos14 readings4 assignments1 discussion prompt

20 videos Total 108 minutes

Introduction to the course 5 minutes
Overview of Azure Active Directory Identity Protection 8 minutes
Configure risk event detections 4 minutes
Detect risks with Azure Active Directory identity protection policies 5 minutes
Multifactor authentication and identity protection 8 minutes
What is conditional access? 5 minutes
Implement access reviews 5 minutes
Investigate and remediate risks detected by Azure Active Directory identity protection 6 minutes
Overview of Azure Active Directory Privileged Identity Management 7 minutes
Explore the zero trust model 5 minutes
The evolution of identity management 4 minutes
Plan a Privileged Identity Management deployment 7 minutes
Assign Azure Active Directory roles in Privileged Identity Management 5 minutes
Activate an Azure Active Directory role in Privileged Identity Management 4 minutes
Approve or deny requests for Azure Active Directory roles in Privileged Identity Management 4 minutes
Implement a workflow 5 minutes
Managing privileged access Azure Active Directory groups 5 minutes
Activate privileged access group roles and approve activation requests 6 minutes
Invite guest users and assign Azure resource roles 4 minutes
Module summary 6 minutes

14 readings Total 158 minutes

How to be successful in this course 5 minutes
Implement user risk and sign-in policies 3 minutes
Configure conditional access and access reviews 7 minutes
Exercise: Multifactor authentication, Conditional Access and Azure Active Directory Identity Protection 30 minutes
Solution: Multifactor authentication, Conditional Access and Azure Active Directory Identity Protection 5 minutes
Smart lockout 5 minutes
Configure Privileged Identity Management scope 10 minutes
Exercise: Configure Azure Active Directory Privileged Identity Management for roles and resources 30 minutes
Solution: Configure Azure Active Directory Privileged Identity Management for roles and resources 30 minutes
Additional resources: Privileged Identity Management 5 minutes
Assign eligibility for a privileged access group 5 minutes
Exercise: Configure Azure Active Directory Privileged Identity Management for groups 15 minutes
Solution: Configure Azure Active Directory Privileged Identity Management for groups 5 minutes
Additional resources: Bring groups into Privileged Identity Management 3 minutes

4 assignments Total 75 minutes

Knowledge check: Deploy Azure Active Directory identity protection 15 minutes
Knowledge check: Azure Active Directory Privileged Identity Management 15 minutes
Knowledge check: Working with Azure Active Directory groups and guests in Azure Privileged Identity Management 15 minutes
Module quiz: Identity protection and governance 30 minutes

1 discussion prompt Total 5 minutes

Meet & greet 5 minutes

In this module, you will learn about the core principles of enterprise governance. You will gain an in-depth understanding of the shared responsibility model and how it impacts security configuration. You will explore the Azure cloud security advantages. You will learn how to create policies to protect your solutions and configure and deploy access to services using role-based access control (RBAC). You will also learn about the Azure hierarchy of systems.

What's included

7 videos9 readings3 assignments

7 videos Total 37 minutes

Overview of the shared responsibility model 5 minutes
Explore the Azure cloud security advantages 5 minutes
Review Azure hierarchy of systems 6 minutes
Overview of Azure policies 5 minutes
Azure policy effects 7 minutes
Group policies into initiatives 4 minutes
Module summary 6 minutes

9 readings Total 107 minutes

The shared responsibility model in depth 14 minutes
Policies, initiatives, and recommendations 9 minutes
Additional resources: Core principles of enterprise governance 3 minutes
Azure built-in policies 13 minutes
Azure policy definition structure 13 minutes
Get compliance data of Azure resources 10 minutes
Built-in initiatives 10 minutes
Exercise: Implement Azure Policy 30 minutes
Solution: Implement Azure Policy 5 minutes

3 assignments Total 60 minutes

Knowledge check: Core principles of enterprise governance 15 minutes
Knowledge check: Policies 15 minutes
Module quiz: Policies, initiatives and recommendations 30 minutes

In this module, you will learn about Azure role-based access control (RBAC) and how to enable and assign RBAC roles, including the key differences between Azure Policy and RBAC. You will learn how to configure the built-in roles in Azure to control access to Azure resources, the structure of role definitions for access control, how to define custom role permissions, and create and assign a custom role to a user. You will also learn how to monitor, maintain, and protect resources. You will learn how to deploy Azure blueprints and design an Azure subscription management plan.

What's included

10 videos7 readings3 assignments

10 videos Total 62 minutes

What is Azure role-based access control? 7 minutes
Enable Azure role-based access control 8 minutes
Compare and contrast Azure role-based access control vs Azure policies 4 minutes
Azure built-in roles 5 minutes
An overview of custom roles in Azure 7 minutes
An overview of resource locks 6 minutes
Demo: Manage resource locks 4 minutes
Deploy Azure blueprints 8 minutes
Design an Azure subscription management plan 8 minutes
Module summary 6 minutes