Understand how Microsoft Defender for Cloud supports AI security and governance in Azure

• Understand AI services in Azure
• Understand AI security risks in Azure
• AI guardrails and protections in Azure
• How Azure security and governance tools support AI workloads

Protect AI workloads with Microsoft Defender for Cloud

• Enable the AI workloads plan
• Review insights in the Data & AI security dashboard
• Assess and improve AI security posture with Cloud Security Posture Management (CSPM)
• Detect AI threats at runtime with Cloud Workload Protection (CWP)
• Investigate AI security alerts with prompt evidence in Microsoft Defender XDR

Configure and manage guardrails in Microsoft Foundry

• Understand guardrails and Microsoft Content Safety
• Understand safety controls in Microsoft Foundry
• Try out built-in guardrails
• Create and manage blocklists in Microsoft Foundry
• Configure and apply guardrails in Microsoft Foundry
• Choose and refine the right guardrails for your AI workloads

Secure Microsoft Foundry environments

• Control access to Microsoft Foundry with Microsoft Entra ID
• Manage access within Microsoft Foundry projects
• Secure Microsoft Foundry secrets with Azure Key Vault (preview)
• Isolate networks with managed virtual network and Private Link
• Enable diagnostic logging in Microsoft Foundry

Understand identity architecture for AI workloads

• Identity as the control layer for AI solutions
• Management plane and data plane access in AI workloads
• Authentication flows for AI endpoints in Microsoft Foundry
• Human and workload identities in AI workloads
• Role assignments and scope in AI environments
• Common identity misconfigurations in AI deployments

Implement access management for Azure resources

• Assign Azure roles
• Configure custom Azure roles
• Create and configure managed identities
• Access Azure resources with managed identities
• Analyze Azure role permissions
• Configure Azure Key Vault RBAC policies
• Retrieve objects from Azure Key Vault

Plan, implement, and administer Conditional Access

• Plan security defaults
• Exercise – Work with security defaults
• Plan Conditional Access policies
• Implement Conditional Access policy controls and assignments
• Exercise – Implement Conditional Access policies roles and assignments
• Test and troubleshoot Conditional Access policies
• Implement application controls
• Implement session management and continuous access evaluation
• Exercise – Configure authentication session controls
• Microsoft Entra Conditional Access Optimization agent

Manage Microsoft Entra Identity Protection

• Review identity protection basics
• Implement and manage user risk policy
• Exercise enable sign-in risk policy
• Exercise configure Microsoft Entra multifactor authentication registration policy
• Monitor, investigate, and remediate elevated risky users
• Implement security for workload identities
• Explore Microsoft Defender for Identity
• Explore the Identity Risk Management Agent

• Applicare la gestione del livello di sicurezza e la protezione dei carichi di lavoro per i servizi di IA utilizzando Microsoft Defender for Cloud
• Configurare e proteggere gli ambienti Microsoft Foundry utilizzando controlli di sicurezza nativi del cloud
• Progettare e applicare controlli di identità e accesso per i carichi di lavoro di IA utilizzando Microsoft Entra

Per partecipare con profitto a questo corso è necessario possedere i seguenti prerequisiti:

• Esperienza nella gestione di abbonamenti Azure, carichi di lavoro e piani Defender for Cloud
• Conoscenza di Microsoft Foundry e delle modalità di distribuzione dei carichi di lavoro basati sull’intelligenza artificiale in Azure
• Comprensione dei principi fondamentali della sicurezza nel cloud, tra cui la gestione della postura di sicurezza, il controllo degli accessi e l’analisi degli incidenti

Il corso include:

• documentazione didattica accessibile via web, di durata illimitata;
• un attestato di frequenza inviato via e-mail una settimana dopo il termine del corso.