Secure cloud identity - You will learn how to plan and protect identity in Microsoft 365, reduce account takeover risk, set up directory sync correctly, and strengthen authentication across your environment.
Stronger threat protection - You will see how to use Microsoft Defender and EOP to detect phishing, malicious email, and endpoint threats faster, while improving your ability to contain incidents effectively.
Better user administration - You will practice assigning roles, protecting privileged accounts, managing passwords, and controlling device access, so you can streamline administration and reduce configuration errors.
Control over mobile devices - You will learn practical MDM and MAM use cases to deploy devices securely, enforce data protection policies, and separate corporate resources from private data on mobile devices.
Protection for sensitive data - You will work with retention, archiving, IRM, S-MIME, and message encryption, so you can better safeguard documents and communication that contain confidential business information.
Faster incident response - You will understand how to use the security dashboard, threat analytics, audit logs, and Azure Sentinel to investigate incidents more quickly and choose more effective response actions.
Leak prevention in practice - You will learn how to create and fine-tune DLP policies that help you protect documents, messages, and business data from accidental exposure or unauthorized sharing.
More confident compliance work - You will explore compliance tools, eDiscovery, content search, and insider risk features, helping you prepare your organization better for audits and internal investigations.
User accounts, administrative roles, and password practices are treated as operational controls that shape day-to-day access governance. The section also covers application management, identity administration, device access management, and Privileged Identity Management for higher-risk permissions.
Zero Trust sets the foundation for planning identity and authentication in Microsoft 365. From there, the section moves into directory synchronization, configuration of synchronized identities, and the protection mechanisms available in Azure AD to reduce account compromise and improve control.
Threat vectors, data breaches, and policy decisions form the context for understanding security across the Microsoft 365 platform. This section connects core strategy with Microsoft Defender for Office 365, Defender for Identity, Defender for Endpoints, and the use of Security Score to measure posture.
Microsoft 365 Defender brings together protection, detection, and response capabilities for advanced threats across the environment. The section includes Exchange Online Protection, threat management, investigation workflows, the security dashboard, Azure Sentinel, and advanced threat analytics.
Cloud applications introduce specific exposure points that must be assessed before controls are applied. The material focuses on implementing security measures for cloud apps and using available security information to evaluate application risk, visibility, and the adequacy of adopted protections.
Managing access from phones and tablets requires separate control over applications and the devices that run them. This part distinguishes MAM from MDM, then covers service deployment and the enrollment process needed to bring mobile endpoints under policy and administrative supervision.
Information protection in Microsoft 365 combines governance and technical controls for handling sensitive content throughout its lifecycle. The section addresses document management, archiving, retention, in-place records in SharePoint, and message protection through IRM, S-MIME, and Office 365 Message Encryption.
Preventing data leakage starts with the logic behind Data Loss Prevention and the way policies are enforced across Microsoft 365. Participants work with creating and refining DLP rules, protecting documents, and using policy tips to guide user behavior at the point of action.
Within the Compliance Center, the focus is on linking audit activities, compliance reporting, and internal risk controls. It covers insider risk, privileged access, information barriers, and the setup of ethical walls in Exchange Online to separate sensitive communication flows.
Content Search and Advanced eDiscovery are used here to locate data relevant to incidents, legal matters, and internal reviews. The section also explains how investigation audit logs support evidence collection, trace user and admin activity, and structure a defensible response process.
Microsoft 365 basics - You should be comfortable navigating Microsoft 365 services and understand the purpose of components such as Exchange Online, SharePoint Online, Teams, and Entra ID.
User administration basics - You should know the core concepts of accounts, groups, roles, and permissions so you can quickly follow topics related to access control and identity management.
Core IT security concepts - You should understand concepts such as authentication, authorization, phishing, malware, password policy, and encryption, because they will be expanded during training.
Hands-on admin experience - It is helpful if you have experience working with admin portals and basic cloud service configuration, as this will make the practical exercises easier to complete.
