Microsoft Certified: Cloud and AI Security Engineer

As a candidate for this Microsoft Certification, you’re a security engineer who protects organizational systems and data across cloud and hybrid environments by implementing comprehensive security controls that proactively help prevent unauthorized access and mitigate risks. Your role spans multiple security domains, including identity, network, application, data, and compute. You also help ensure that platforms, data, identities, and infrastructure used by AI workloads are securely implemented and monitored.

In this role, your responsibilities include:

• Securing access to resources by using Microsoft Entra ID and Azure Key Vault.

• Enforcing security and regulatory compliance.

• Securing storage, databases, and networking.

• Securing compute.

• Securing AI solutions.

• Managing and monitoring security posture.

You work closely with architects, administrators, engineers, analysts, and developers responsible for Azure, Microsoft 365, identity and access, information protection, security operations, DevOps, application development, database platforms, and networks.

For this exam, you should have practical experience in administration of Azure and hybrid environments, including compute, network, and storage. You need strong familiarity with Microsoft Entra ID and familiarity with Microsoft 365 administration.

What you will learn

• Prepare for the SC-500 exam and understand the security engineer role across Azure, hybrid, and AI-enabled environments.

• Implement identity, access, and governance controls using Microsoft Entra ID, Azure RBAC, PIM, Conditional Access, and Azure Key Vault.

• Azure security core services and implement security controls and threat protection.

• Secure Azure Storage, Azure SQL databases, and network services using firewalls, private access, encryption, and access controls.

• Secure virtual machines, containers, application services, APIs, and AI workloads using Microsoft security controls and best practices.

• Manage security posture and workload protection with Microsoft Defender for Cloud, Defender CSPM, and vulnerability management.

Course Outline

Secure access to resources by using Microsoft Entra

• Manage and implement authentication methods in Microsoft Entra ID

• Implement and configure Privileged Identity Management (PIM)

• Authenticate your API plugin for declarative agents with secured APIs

Secure Azure Key Vault with defense in depth for the cloud and AI workloads

• Configure and secure Azure Key Vault

• Manage keys and secrets in Azure Key Vault

• Manage certificates and monitor Azure Key Vault

• Protect Azure Key Vault with Microsoft Defender for Cloud

Enforce security governance and regulatory compliance

• Enforce governance with Azure Policy and resource locks

• Configure security controls and remediate recommendations in Defender for Cloud

• Evaluate regulatory compliance in Defender for Cloud

• Manage and right-size RBAC role assignments for least privilege

• Protect backup data with Azure Backup security features

• Implement security controls in infrastructure as code

Implement security for Azure Storage for the cloud and AI security engineer

• Describe Azure storage services

• Implement security and manage access for Azure Storage

• Configure network security for Azure Storage

• Implement Microsoft Defender for Storage

Implement security for Azure SQL databases

• Configure platform-level security for Azure SQL

• Configure auditing for Azure SQL Database and SQL Managed Instance

• Implement Microsoft Defender for Database

Implement security for AI

• Secure access for Microsoft Entra Agent Identity

• Analyze AI identity risks using Microsoft Defender XDR

• Enable real-time protection for Copilot Studio agents

• Configure AI Gateway security in Microsoft Foundry

• Configure and manage guardrails in Microsoft Foundry

• Protect AI workloads with Microsoft Defender for Cloud

• Enable Defender for AI Services workload protection in Microsoft Defender for Cloud

• Manage agents using Microsoft Agent 365

• Identify AI data risks using Microsoft Purview Data Security Posture Management