Azure Security Engineer Training (AZ-500)

Master Azure security with this comprehensive 4-day training covering identity and access management, platform protection, security operations, and data and application security. Learn to implement security controls and threat protection across Azure environments while preparing for the AZ-500 certification.

Training Details


Duration	4 days (32 hours)
Level	Intermediate
Delivery	In-person, Live online, Hybrid
Certification	Microsoft Certified: Azure Security Engineer Associate (AZ-500)

Who Is This For?

Azure security engineers
Security administrators
Security analysts
Cloud security specialists
Anyone preparing for AZ-500 certification

Learning Outcomes

After completing this training, you’ll be able to:

Manage identity and access in Azure
Implement platform protection including network security
Manage security operations and monitoring
Secure data and applications
Implement threat protection across Azure workloads
Configure and monitor Microsoft Defender for Cloud

Detailed Agenda

Day 1: Identity and Access Management

Module 1: Microsoft Entra ID Security

Identity protection and risk policies
Conditional access policies
Access reviews and PIM
Hands-on: Configure identity protection

Module 2: Hybrid Identity Security

Azure AD Connect security
Password hash sync vs. federation
Multi-factor authentication
Hands-on: Implement MFA and conditional access

Module 3: Azure AD Application Security

Application registrations and service principals
Managed identities
API permissions and consent
Hands-on: Secure applications with managed identities

Day 2: Platform Protection

Module 4: Network Security

Network security groups and application security groups
Azure Firewall policies
DDoS Protection
Web Application Firewall
Hands-on: Implement network security

Module 5: Host Security

Endpoint protection
Just-in-Time VM access
Update management
Disk encryption
Hands-on: Secure virtual machines

Module 6: Container and AKS Security

Container registry security
AKS security best practices
Pod security policies
Hands-on: Secure AKS cluster

Day 3: Security Operations

Module 7: Microsoft Defender for Cloud

Security posture management
Secure score optimization
Regulatory compliance dashboards
Hands-on: Configure Defender for Cloud

Module 8: Threat Protection

Microsoft Defender for Servers
Microsoft Defender for Storage
Microsoft Defender for Key Vault
Hands-on: Enable threat protection

Module 9: Security Monitoring

Microsoft Sentinel deployment
Data connectors and log collection
Analytics rules and incidents
Hands-on: Configure Sentinel workspace

Module 10: Incident Response

Playbooks and automation
Investigation and hunting
Threat intelligence integration
Hands-on: Create incident response playbook

Day 4: Data and Application Security

Module 11: Data Security

Azure SQL Database security
Storage encryption and access control
Azure Key Vault management
Always Encrypted and TDE
Hands-on: Implement data encryption

Module 12: Application Security

API Management security policies
App Service security features
Azure Functions security
Hands-on: Secure web applications

Module 13: Exam Preparation

AZ-500 exam format and domains
Security scenario practice
Study resources

Prerequisites

6-12 months Azure security experience
Understanding of Azure services and management
Networking and OS security fundamentals
Azure Administrator certification helpful

Delivery Formats

Format	Description
In-Person	On-site at your company’s location, hands-on with direct interaction
Live Online	Interactive virtual sessions with screen sharing and real-time labs
Hybrid	Combination of on-site and remote sessions, flexible scheduling

All formats include hands-on labs, course materials, practice exams, and post-training support.