Azure Security Technologies (AZ-500) Curriculum

Public curriculum preview for visitors and enrolled students. Use this page to evaluate module scope, outcomes, and learning path.

Download PDFBack to Course
Curriculum

Azure Security Technologies

Secure Azure infrastructure with hands-on labs, identity protection, and real-world SOC automation projects.

Duration: 16 Weeks
Level: Advanced
Study Time: 2 hours/week + Labs
School: Cybersecurity

Welcome to Your Azure Security Journey! 🎓

This curriculum for Azure Security Technologies follows a Bloom-aligned progression from practical foundations to measurable professional outcomes, with weekly evidence, labs, and portfolio outputs matched to advanced expectations.

Each week advances from comprehension and application toward evaluation and creation, ensuring progressive learning and capstone readiness.

Your success is our priority. We've carefully structured this curriculum to balance theoretical knowledge with practical application, ensuring you're not just exam-ready, but career-ready. You will graduate with a professionally curated portfolio that demonstrates scope, depth, and delivery quality. You will graduate with a professionally curated portfolio that demonstrates scope, depth, and delivery quality. You will graduate with a professionally curated portfolio that demonstrates scope, depth, and delivery quality. You will graduate with a professionally curated portfolio that demonstrates scope, depth, and delivery quality.

Prerequisites

  • Basic understanding of Azure fundamentals (compute, storage, networking)
  • Familiarity with Azure portal and Azure CLI
  • Understanding of networking concepts (DNS, VPN, firewalls)
  • Basic knowledge of Windows Server and Linux administration
  • Understanding of identity concepts (authentication, authorization)
  • Familiarity with PowerShell and basic scripting
  • Understanding of encryption and cryptography basics

Complementary Courses

Cybersecurity Fundamentals

Strengthen your security foundation with network and systems defense fundamentals.

DevSecOps Engineering

Learn to automate security in CI/CD pipelines and integrate security into DevOps workflows.

Enterprise Cloud Solutions Architect

Understand enterprise architecture patterns and cloud solution design.

Network Security Administration

Deepen your network security knowledge with advanced administration techniques.

Detailed Weekly Curriculum

Each week includes outcomes and practical lab work aligned to the curriculum structure.

Week 1

Azure Active Directory & Identity Management Fundamentals

2 hours
Learning Outcomes
  • Analyze the principles of Azure Active Directory & Identity Management Fundamentals and link them to course outcomes at advanced depth with architecture-level decision quality.
  • Evaluate Azure Active Directory & Identity Management Fundamentals in a guided scenario using realistic tools, constraints, and quality gates.
  • Design trade-offs, risks, and decision points for Azure Active Directory & Identity Management Fundamentals, then record rationale for stakeholder review.
  • Justify a portfolio-ready control validation dossier for Azure Active Directory & Identity Management Fundamentals with measurable success criteria and next actions.
  • Track measurable progress using rubric scores, defect/risk trends, and evidence completeness each week.
🔬 Lab Exercise
  • Design and execute a concrete Azure Active Directory & Identity Management Fundamentals build in Azure Security Technologies with a clear acceptance checklist.
  • Validate Azure Active Directory & Identity Management Fundamentals with objective tests and quality controls before review.
  • Deliver Azure Active Directory & Identity Management Fundamentals artifacts with reproducible steps and operational notes.
Week 2

Advanced Identity Protection & Multi-Factor Authentication

2 hours
Learning Outcomes
  • Analyze the principles of Advanced Identity Protection & Multi-Factor Authentication and link them to course outcomes at advanced depth with architecture-level decision quality.
  • Evaluate Advanced Identity Protection & Multi-Factor Authentication in a guided scenario using realistic tools, constraints, and quality gates.
  • Design trade-offs, risks, and decision points for Advanced Identity Protection & Multi-Factor Authentication, then record rationale for stakeholder review.
  • Justify a portfolio-ready control validation dossier for Advanced Identity Protection & Multi-Factor Authentication with measurable success criteria and next actions.
  • Track measurable progress using rubric scores, defect/risk trends, and evidence completeness each week.
🔬 Lab Exercise
  • Design and execute a concrete Advanced Identity Protection & Multi-Factor Authentication build in Azure Security Technologies with a clear acceptance checklist.
  • Validate Advanced Identity Protection & Multi-Factor Authentication with objective tests and quality controls before review.
  • Deliver Advanced Identity Protection & Multi-Factor Authentication artifacts with reproducible steps and operational notes.
Week 3

Role-Based Access Control (RBAC) & Access Management

2 hours
Learning Outcomes
  • Analyze the principles of Role-Based Access Control (RBAC) & Access Management and link them to course outcomes at advanced depth with architecture-level decision quality.
  • Evaluate Role-Based Access Control (RBAC) & Access Management in a guided scenario using realistic tools, constraints, and quality gates.
  • Design trade-offs, risks, and decision points for Role-Based Access Control (RBAC) & Access Management, then record rationale for stakeholder review.
  • Justify a portfolio-ready control validation dossier for Role-Based Access Control (RBAC) & Access Management with measurable success criteria and next actions.
  • Track measurable progress using rubric scores, defect/risk trends, and evidence completeness each week.
🔬 Lab Exercise
  • Design and execute a concrete Role-Based Access Control (RBAC) & Access Management build in Azure Security Technologies with a clear acceptance checklist.
  • Validate Role-Based Access Control (RBAC) & Access Management with objective tests and quality controls before review.
  • Deliver Role-Based Access Control (RBAC) & Access Management artifacts with reproducible steps and operational notes.
Week 4

Privileged Identity Management (PIM) & Governance

2 hours
Learning Outcomes
  • Analyze the principles of Privileged Identity Management (PIM) & Governance and link them to course outcomes at advanced depth with architecture-level decision quality.
  • Evaluate Privileged Identity Management (PIM) & Governance in a guided scenario using realistic tools, constraints, and quality gates.
  • Design trade-offs, risks, and decision points for Privileged Identity Management (PIM) & Governance, then record rationale for stakeholder review.
  • Justify a portfolio-ready control validation dossier for Privileged Identity Management (PIM) & Governance with measurable success criteria and next actions.
  • Track measurable progress using rubric scores, defect/risk trends, and evidence completeness each week.
🔬 Lab Exercise
  • Design and execute a concrete Privileged Identity Management (PIM) & Governance build in Azure Security Technologies with a clear acceptance checklist.
  • Validate Privileged Identity Management (PIM) & Governance with objective tests and quality controls before review.
  • Deliver Privileged Identity Management (PIM) & Governance artifacts with reproducible steps and operational notes.
Week 5

Azure Network Security Fundamentals

2 hours
Learning Outcomes
  • Analyze the principles of Azure Network Security Fundamentals and link them to course outcomes at advanced depth with architecture-level decision quality.
  • Evaluate Azure Network Security Fundamentals in a guided scenario using realistic tools, constraints, and quality gates.
  • Design trade-offs, risks, and decision points for Azure Network Security Fundamentals, then record rationale for stakeholder review.
  • Justify a portfolio-ready control validation dossier for Azure Network Security Fundamentals with measurable success criteria and next actions.
  • Track measurable progress using rubric scores, defect/risk trends, and evidence completeness each week.
🔬 Lab Exercise
  • Implement a working Azure Network Security Fundamentals topology with explicit segmentation and traffic intent.
  • Validate allowed and denied flows for Azure Network Security Fundamentals with repeatable connectivity tests.
  • Document fault scenarios and recovery steps for Azure Network Security Fundamentals operations.
Week 6

Perimeter Security & Azure Firewall

2 hours
Learning Outcomes
  • Analyze the principles of Perimeter Security & Azure Firewall and link them to course outcomes at advanced depth with architecture-level decision quality.
  • Evaluate Perimeter Security & Azure Firewall in a guided scenario using realistic tools, constraints, and quality gates.
  • Design trade-offs, risks, and decision points for Perimeter Security & Azure Firewall, then record rationale for stakeholder review.
  • Justify a portfolio-ready control validation dossier for Perimeter Security & Azure Firewall with measurable success criteria and next actions.
  • Track measurable progress using rubric scores, defect/risk trends, and evidence completeness each week.
🔬 Lab Exercise
  • Implement a working Perimeter Security & Azure Firewall topology with explicit segmentation and traffic intent.
  • Validate allowed and denied flows for Perimeter Security & Azure Firewall with repeatable connectivity tests.
  • Document fault scenarios and recovery steps for Perimeter Security & Azure Firewall operations.
Week 7

Compute & Container Security

2 hours
Learning Outcomes
  • Evaluate the principles of Compute & Container Security and link them to course outcomes at advanced depth with architecture-level decision quality.
  • Design Compute & Container Security in a guided scenario using realistic tools, constraints, and quality gates.
  • Optimize trade-offs, risks, and decision points for Compute & Container Security, then record rationale for stakeholder review.
  • Justify a portfolio-ready control validation dossier for Compute & Container Security with measurable success criteria and next actions.
  • Track measurable progress using rubric scores, defect/risk trends, and evidence completeness each week.
🔬 Lab Exercise
  • Implement baseline controls for Compute & Container Security and verify enforcement on target systems.
  • Run assessment/scanning for Compute & Container Security and prioritize findings by exploitability and impact.
  • Close critical findings for Compute & Container Security and publish re-test evidence.
Week 8

Azure Security Center & Defender for Cloud

2 hours
Learning Outcomes
  • Evaluate the principles of Azure Security Center & Defender for Cloud and link them to course outcomes at advanced depth with architecture-level decision quality.
  • Design Azure Security Center & Defender for Cloud in a guided scenario using realistic tools, constraints, and quality gates.
  • Optimize trade-offs, risks, and decision points for Azure Security Center & Defender for Cloud, then record rationale for stakeholder review.
  • Justify a portfolio-ready control validation dossier for Azure Security Center & Defender for Cloud with measurable success criteria and next actions.
  • Track measurable progress using rubric scores, defect/risk trends, and evidence completeness each week.
🔬 Lab Exercise
  • Implement baseline controls for Azure Security Center & Defender for Cloud and verify enforcement on target systems.
  • Run assessment/scanning for Azure Security Center & Defender for Cloud and prioritize findings by exploitability and impact.
  • Close critical findings for Azure Security Center & Defender for Cloud and publish re-test evidence.
Week 9

Azure Monitor & Log Analytics

2 hours
Learning Outcomes
  • Evaluate the principles of Azure Monitor & Log Analytics and link them to course outcomes at advanced depth with architecture-level decision quality.
  • Design Azure Monitor & Log Analytics in a guided scenario using realistic tools, constraints, and quality gates.
  • Optimize trade-offs, risks, and decision points for Azure Monitor & Log Analytics, then record rationale for stakeholder review.
  • Justify a portfolio-ready control validation dossier for Azure Monitor & Log Analytics with measurable success criteria and next actions.
  • Track measurable progress using rubric scores, defect/risk trends, and evidence completeness each week.
🔬 Lab Exercise
  • Build a practical Azure Monitor & Log Analytics workflow with source-to-output transformation steps.
  • Validate Azure Monitor & Log Analytics quality and performance with objective checks and tuning updates.
  • Deliver reproducible Azure Monitor & Log Analytics outputs (dashboard/report/notebook) with run instructions.
Week 10

Azure Sentinel (Microsoft Sentinel)

2 hours
Learning Outcomes
  • Evaluate the principles of Azure Sentinel (Microsoft Sentinel) and link them to course outcomes at advanced depth with architecture-level decision quality.
  • Design Azure Sentinel (Microsoft Sentinel) in a guided scenario using realistic tools, constraints, and quality gates.
  • Optimize trade-offs, risks, and decision points for Azure Sentinel (Microsoft Sentinel), then record rationale for stakeholder review.
  • Justify a portfolio-ready control validation dossier for Azure Sentinel (Microsoft Sentinel) with measurable success criteria and next actions.
  • Track measurable progress using rubric scores, defect/risk trends, and evidence completeness each week.
🔬 Lab Exercise
  • Design and execute a concrete Azure Sentinel (Microsoft Sentinel) build in Azure Security Technologies with a clear acceptance checklist.
  • Validate Azure Sentinel (Microsoft Sentinel) with objective tests and quality controls before review.
  • Deliver Azure Sentinel (Microsoft Sentinel) artifacts with reproducible steps and operational notes.
Week 11

Threat Detection & Incident Response

2 hours
Learning Outcomes
  • Evaluate the principles of Threat Detection & Incident Response and link them to course outcomes at advanced depth with architecture-level decision quality.
  • Design Threat Detection & Incident Response in a guided scenario using realistic tools, constraints, and quality gates.
  • Optimize trade-offs, risks, and decision points for Threat Detection & Incident Response, then record rationale for stakeholder review.
  • Justify a portfolio-ready control validation dossier for Threat Detection & Incident Response with measurable success criteria and next actions.
  • Track measurable progress using rubric scores, defect/risk trends, and evidence completeness each week.
🔬 Lab Exercise
  • Implement baseline controls for Threat Detection & Incident Response and verify enforcement on target systems.
  • Run assessment/scanning for Threat Detection & Incident Response and prioritize findings by exploitability and impact.
  • Close critical findings for Threat Detection & Incident Response and publish re-test evidence.
Week 12

Compliance & Governance

2 hours
Learning Outcomes
  • Design the principles of Compliance & Governance and link them to course outcomes at advanced depth with architecture-level decision quality.
  • Optimize Compliance & Governance in a guided scenario using realistic tools, constraints, and quality gates.
  • Architect trade-offs, risks, and decision points for Compliance & Governance, then record rationale for stakeholder review.
  • Defend a portfolio-ready control validation dossier for Compliance & Governance with measurable success criteria and next actions.
  • Track measurable progress using rubric scores, defect/risk trends, and evidence completeness each week.
🔬 Lab Exercise
  • Implement baseline controls for Compliance & Governance and verify enforcement on target systems.
  • Run assessment/scanning for Compliance & Governance and prioritize findings by exploitability and impact.
  • Close critical findings for Compliance & Governance and publish re-test evidence.
Week 13

Azure Key Vault & Secrets Management

2 hours
Learning Outcomes
  • Design the principles of Azure Key Vault & Secrets Management and link them to course outcomes at advanced depth with architecture-level decision quality.
  • Optimize Azure Key Vault & Secrets Management in a guided scenario using realistic tools, constraints, and quality gates.
  • Architect trade-offs, risks, and decision points for Azure Key Vault & Secrets Management, then record rationale for stakeholder review.
  • Defend a portfolio-ready control validation dossier for Azure Key Vault & Secrets Management with measurable success criteria and next actions.
  • Track measurable progress using rubric scores, defect/risk trends, and evidence completeness each week.
🔬 Lab Exercise
  • Design and execute a concrete Azure Key Vault & Secrets Management build in Azure Security Technologies with a clear acceptance checklist.
  • Validate Azure Key Vault & Secrets Management with objective tests and quality controls before review.
  • Deliver Azure Key Vault & Secrets Management artifacts with reproducible steps and operational notes.
Week 14

Data Security & Application Protection

2 hours
Learning Outcomes
  • Design the principles of Data Security & Application Protection and link them to course outcomes at advanced depth with architecture-level decision quality.
  • Optimize Data Security & Application Protection in a guided scenario using realistic tools, constraints, and quality gates.
  • Architect trade-offs, risks, and decision points for Data Security & Application Protection, then record rationale for stakeholder review.
  • Defend a portfolio-ready control validation dossier for Data Security & Application Protection with measurable success criteria and next actions.
  • Track measurable progress using rubric scores, defect/risk trends, and evidence completeness each week.
🔬 Lab Exercise
  • Implement baseline controls for Data Security & Application Protection and verify enforcement on target systems.
  • Run assessment/scanning for Data Security & Application Protection and prioritize findings by exploitability and impact.
  • Close critical findings for Data Security & Application Protection and publish re-test evidence.
Week 15

Comprehensive Review & Practice Scenarios

2 hours
Learning Outcomes
  • Design the principles of Comprehensive Review & Practice Scenarios and link them to course outcomes at advanced depth with architecture-level decision quality.
  • Optimize Comprehensive Review & Practice Scenarios in a guided scenario using realistic tools, constraints, and quality gates.
  • Architect trade-offs, risks, and decision points for Comprehensive Review & Practice Scenarios, then record rationale for stakeholder review.
  • Defend a portfolio-ready control validation dossier for Comprehensive Review & Practice Scenarios with measurable success criteria and next actions.
  • Track measurable progress using rubric scores, defect/risk trends, and evidence completeness each week.
🔬 Lab Exercise
  • Design and execute a concrete Comprehensive Review & Practice Scenarios build in Azure Security Technologies with a clear acceptance checklist.
  • Validate Comprehensive Review & Practice Scenarios with objective tests and quality controls before review.
  • Deliver Comprehensive Review & Practice Scenarios artifacts with reproducible steps and operational notes.
Week 16

Final Preparation & Exam Readiness

2 hours
Learning Outcomes
  • Design the principles of Final Preparation & Exam Readiness and link them to course outcomes at advanced depth with architecture-level decision quality.
  • Optimize Final Preparation & Exam Readiness in a guided scenario using realistic tools, constraints, and quality gates.
  • Architect trade-offs, risks, and decision points for Final Preparation & Exam Readiness, then record rationale for stakeholder review.
  • Defend a portfolio-ready control validation dossier for Final Preparation & Exam Readiness with measurable success criteria and next actions.
  • Track measurable progress using rubric scores, defect/risk trends, and evidence completeness each week.
🔬 Lab Exercise
  • Design and execute a concrete Final Preparation & Exam Readiness build in Azure Security Technologies with a clear acceptance checklist.
  • Validate Final Preparation & Exam Readiness with objective tests and quality controls before review.
  • Deliver Final Preparation & Exam Readiness artifacts with reproducible steps and operational notes.

Capstone Projects

Project 1: Azure Security Technologies Foundation Build

Deliver a concrete foundation implementation covering the first phase of the curriculum.

  • Implement and validate Azure Active Directory & Identity Management Fundamentals.
  • Integrate Advanced Identity Protection & Multi-Factor Authentication with reusable workflow standards.
  • Publish evidence for Role-Based Access Control (RBAC) & Access Management with test and quality artifacts.

Project 2: Azure Security Technologies Integrated Systems Build

Combine mid-program competencies into a production-style integrated workflow.

  • Build an end-to-end flow around Perimeter Security & Azure Firewall and Compute & Container Security.
  • Add controls, observability, and rollback paths for reliability.
  • Document architecture decisions and trade-offs tied to Azure Security Center & Defender for Cloud.

Project 3: Azure Security Technologies Capstone Delivery

Ship a portfolio-ready capstone with measurable outcomes and stakeholder-ready presentation.

  • Deliver a complete implementation centered on Azure Key Vault & Secrets Management.
  • Validate readiness for Data Security & Application Protection using objective acceptance checks.
  • Present final defense and roadmap based on Comprehensive Review & Practice Scenarios outcomes.