30 reviews

Microsoft Cloud and AI Security Engineer (SC-500) Course

Item: Microsoft Cloud and AI Security Engineer (SC-500) Course
Rating: 10
Author: Stephen Ridgway

Prepare for the SC-500 exam in this 4-day course. Learn to implement end-to-end security controls across Azure, Microsoft 365, and AI workloads.

course: Microsoft Cloud and AI Security Engineer (SC-500)

Duration: 4 days

Format: Virtual or Classroom

Prepares for Exam: Implementing End-to-End Security Controls for Cloud and AI Workloads SC-500

Prepares for Certification: Microsoft Certified: Cloud and AI Security Engineer Associate

Attend this and 60+ other Microsoft courses for FREE with Unlimited Microsoft Training

Overview

In this 4-day course, you build practical skills in identity security, cloud infrastructure protection, threat detection, and posture management through instructor-led sessions and hands-on labs. Topics span securing access with Microsoft Entra ID and Azure Key Vault, enforcing security governance and regulatory compliance, securing storage, databases, networking, compute, and AI workloads. The course prepares you for the SC-500 exam and the Microsoft Certified: Cloud and AI Security Engineer Associate certification.

This course includes

Instructor-led training
Personal Learning Path
Email, chat and phone support
Certification Guarantee

Who is the Microsoft Cloud and AI Security Engineer (SC-500) course for?

As a candidate for this course, you’re a security engineer who protects organizational systems and data across cloud and hybrid environments by implementing comprehensive security controls that prevent unauthorized access and mitigate risks proactively. This role spans multiple security domains including identity, network, application, data, and compute. This role also ensures that platforms, data, identities, and infrastructure used by AI workloads are securely implemented and monitored. You work closely with architects, administrators, engineers, analysts, and developers responsible for Azure, Microsoft 365, identity and access, information protection, security operations, devops, application development, database platforms, and networks. You should have practical experience in administration of Microsoft Azure and hybrid environments, including compute, network, and storage. You should have strong familiarity with Microsoft Entra ID and familiarity with Microsoft 365 administration.

Curriculum

What you will learn during our Microsoft Cloud and AI Security Engineer (SC-500) course.

Secure access to resources by using Microsoft Entra

Manage and implement authentication methods in Microsoft Entra ID
Implement and configure Privileged Identity Management (PIM)
Authenticate your API plugin for declarative agents with secured APIs

Secure Azure Key Vault with defense in depth for the cloud and AI workloads

Configure and secure Azure Key Vault
Manage keys and secrets in Azure Key Vault
Manage certificates and monitor Azure Key Vault
Protect Azure Key Vault with Microsoft Defender for Cloud

Enforce security governance and regulatory compliance

Enforce governance with Azure Policy and resource locks
Configure security controls and remediate recommendations in Defender for Cloud
Evaluate regulatory compliance in Defender for Cloud
Manage and rightsize RBAC role assignments for least privilege
Protect backup data with Azure Backup security features
Implement security controls in infrastructure as code

Implement security for Azure Storage for the cloud and AI security engineer

Describe Azure storage services
Implement security and manage access for Azure Storage
Configure network security for Azure Storage
Implement Microsoft Defender for Storage

Implement security for Azure SQL databases

Configure platformlevel security for Azure SQL
Configure auditing for Azure SQL Database and SQL Managed Instance
Implement Microsoft Defender for Databases

Implement network security controls in Azure

Segment and isolate Azure workloads using network security controls
Centralize and enforce traffic inspection using Azure Firewall
Secure remote and hybrid connectivity using VPN gateways and Microsoft Entra Private Access
Eliminate public network exposure of Azure PaaS services

Implement security for AI

Secure access for Microsoft Entra Agent Identity
Analyze AI identity risks using Microsoft Defender XDR
Enable realtime protection for Copilot Studio agents
Configure AI Gateway security in Microsoft Foundry
Configure and manage guardrails in Microsoft Foundry
Protect AI workloads with Microsoft Defender for Cloud
Enable Defender for AI Services workload protection in Microsoft Defender for Cloud
Manage agents using Microsoft Agent 365
Identify AI data risks using Microsoft Purview Data Security Posture Management

Implement security for servers and virtual machines

Implement disk encryption for Azure virtual machines
Configure trusted launch security features for Azure virtual machines
Plan and implement Azure Bastion
Manage security for Arcenabled hybrid servers
Implement Microsoft Defender for Servers
Enable and enforce justintime VM access
Enforce VM security configuration with Azure Machine Configuration

Secure Azure application platform services for the cloud and AI security engineer

Detect container risks using Microsoft Defender for Containers
Implement security controls for Azure Kubernetes Service
Implement security controls for Azure Container Registry, Container Instances, and Container Apps
Implement security controls for Azure Function apps and Logic apps
Implement security controls for Azure App Services and Web Application Firewall
Implement API backend security using Azure API Management

Manage security posture by using Microsoft Defender for Cloud

Connect hybrid and multicloud environments to Microsoft Defender for Cloud
Identify security risks by using Cloud Security Posture Management
Discover unprotected assets and vulnerabilities by using Microsoft Defender External Attack Surface Management
Evaluate regulatory compliance in Defender for Cloud
Enable and configure workload protection plans in Microsoft Defender for Cloud
Configure Microsoft Defender Vulnerability Management settings for Azure VMs

Implement activity and event collection in Microsoft Sentinel

Create and manage Microsoft Sentinel workspaces
Manage content in Microsoft Sentinel
Connect Microsoft services to Microsoft Sentinel
Connect syslog data sources to Microsoft Sentinel
Connect Common Event Format logs to Microsoft Sentinel
Connect Windows hosts to Microsoft Sentinel
Implement automation rules and playbooks in Microsoft Sentinel
Manage data storage and query audit logs in Microsoft Sentinel

Deploy and operate Microsoft Security Copilot

Describe Microsoft Security Copilot
Configure workspaces for Microsoft Security Copilot
Manage plugins and agents in Microsoft Security Copilot

Preparation

At Readynez, we provide many resources and have experienced experts in the field. That is why we are also very successful with many satisfied customers. You can therefore safely take your course with us. While there are no strict entry requirements, certain foundational knowledge may enhance your learning experience. Any recommended prerequisites specific to this course are detailed below.

Practical experience in administration of Microsoft Azure and hybrid environments, including compute, network, and storage.
Strong familiarity with Microsoft Entra ID and familiarity with Microsoft 365 administration.

Meet our instructors

Meet some of the Readynez Instructors you can meet on your course. They are experts, passionate about what they do, and dedicated to give back to their industry, their field, and those who want to learn, explore, and advance in their careers.

Wilson Tsui Sie Min

Wilson Tsui Sie Min, an experienced Azure and cloud instructor delivers LIVE IT training and certification courses at Readynez. With nearly two decades of global training and infrastructure experience, Wilson helps IT professionals prepare for Azure exams, strengthen cloud skills, and apply practical knowledge through expert-led training.

Meet Wilson Tsui Sie Min – an Azure specialist and globally experienced IT trainer in the Readynez instructor community.

Based in Kuala Lumpur, Wilson brings nearly two decades of experience across enterprise infrastructure, consulting, and international technical training. His background spans everything from system administration and networking to cloud technologies, virtualization, and modern development.

Wilson has worked as a certified trainer for major technology vendors including Microsoft, Citrix, IBM and Huawei, and has delivered training programs to IT professionals across Europe, Africa, Asia and Oceania. Over the years, he has also contributed to enterprise infrastructure projects ranging from Active Directory migrations and storage infrastructure deployments to data center transformations.

Today, Wilson specializes in Microsoft Azure, cloud infrastructure, virtualization and modern development technologies, helping professionals translate complex technical concepts into practical, real-world solutions.

Beyond training, Wilson is passionate about exploring emerging technologies such as AI, cloud computing, and software development, continuously experimenting with new tools and platforms to stay at the forefront of innovation.

Explore upcoming Azure and cloud courses with Wilson at Readynez.

Read Less

Tobias Koprowski

Tobias Koprowski delivers high-quality, LIVE instructor-led IT and cybersecurity training for professionals seeking real-world expertise and certification readiness. With decades of global experience and deep knowledge in Cloud Security, GRC, and data platforms, he helps learners build practical skills and confidence.

Meet the Instructor: Tobias Koprowski

With over 20 years of global experience across IT, banking, education, cloud computing and compliance, Tobias Koprowski is one of the most multifaceted voices in the industry.

As a long-standing Microsoft Data Platform MVP, and an Authorized Instructor for Microsoft, CompTIA, CertNexus and PECB, Tobias has trained professionals across Europe, the Nordics, the US, and beyond.

His training specialties span Cloud Security, Privacy, Governance, Risk, Compliance (GRC), and Data Ethics - helping organizations build secure and regulation-ready environments.

Outside the classroom, Tobias was a regular speaker at international conferences like SQLBits, Microsoft Ignite, and SQL/Data Saturday - until he embraced a new and rewarding role: becoming a double adoptive dad.

That same passion for impact continues in his work today. He’s the founder of the SQLDay Conference in Poland and Shadowland Consulting in the UK, as well as an active STEM Ambassador, promoting tech education across industries.

If you’re taking a course with Tobias, expect practical knowledge, global perspectives, and plenty of energy (plus coffee!)

Explore upcoming Readynez courses with Tobias here: https://www.readynez.com/en/training/courses/all/

Read Less

FAQ

FAQs for the Microsoft Cloud and AI Security Engineer (SC-500) course.

Who should take the Microsoft Cloud and AI Security Engineer (SC-500) course?

The SC-500 course is designed for security engineers responsible for planning and implementing security controls across cloud, hybrid, and multi-cloud environments using Microsoft technologies. It's ideal for professionals working with Microsoft Azure and Microsoft 365 who need to extend their security skills to cover identity, data, network, compute, and AI workloads. It also suits experienced Azure security engineers transitioning from AZ-500.

What experience do I need before taking the SC-500 course?

You should have practical experience administering Microsoft Azure and hybrid environments, including compute, network, and storage. Strong familiarity with Microsoft Entra ID is required, along with working knowledge of Microsoft 365 administration.

How long is the Microsoft Cloud and AI Security Engineer course?

The SC-500T00 instructor-led training runs for 4 days.

Is the SC-500 course available as live, instructor-led training?

Yes. Readynez delivers the Microsoft Cloud and AI Security Engineer (SC-500) course as live, instructor-led virtual training — with a real Microsoft Certified Trainer, not pre-recorded content.

What security domains does the SC-500 course cover?

The course covers six core security domains: securing access to resources using Microsoft Entra ID and Azure Key Vault, enforcing security governance and regulatory compliance, securing storage and databases, implementing network security controls, securing compute, and implementing security for AI workloads. You get hands-on experience with Microsoft Defender, Microsoft Sentinel, Microsoft Purview, and related security technologies.

How does SC-500 differ from AZ-500?

SC-500 is the successor to AZ-500 (Microsoft Azure Security Technologies). It retains the core Azure security engineering skills but extends the scope to include Microsoft 365 security, multi-cloud environments, and AI workload security. The SC-500 course introduces securing AI systems, autonomous agents, and the data and identities those AI workloads rely on — a domain AZ-500 did not cover.

Does the SC-500 course cover security for AI workloads and autonomous agents?

Yes. A dedicated module focuses specifically on implementing security for AI solutions — covering the platforms, data, identities, and infrastructure used by AI workloads and autonomous agents. This is one of the key additions that distinguishes SC-500 from its predecessor.

What exam and certification does the SC-500 course prepare me for?

The SC-500 course prepares you for the exam: Implementing End-to-End Security Controls for Cloud and AI Workloads (SC-500). Passing earns the Microsoft Certified: Cloud and AI Security Engineer Associate certification. The course with Readynez includes a Certification Guarantee.

Can I attend the SC-500 course through Unlimited Microsoft Training?

Yes. The Microsoft Cloud and AI Security Engineer (SC-500) course is included in the Readynez Unlimited Microsoft Training licence — giving you access to this and 60+ other Microsoft instructor-led courses for the price of less than one.

Reviews

Feedback from our delegates.

Johan Andersson

Easy to attend over Teams and an excellent instructor gave me great value for the time I invested.

Stephen Ridgway

Readynez is the best training provider I've used for many years. Their customer service is first class, prices are very competitive and instruction excellent.

Others also attended

Security Compliance Identity Fundamentals SC-900 training course

Microsoft Security, Compliance and Identity Fundamentals (SC-900) Course

The Microsoft Security, Compliance, and Identity Fundamentals (SC-900) course provides a foundation in security, compliance, and identity concepts in Microsoft cloud services. You will learn the basics of identity management, access controls, and data protection. This instructor-led training prepares you for the SC-900 exam and the Microsoft Certified: Security, Compliance, and Identity Fundamentals certification.

9.5 (454 reviews)

Microsoft Certified Security Operations Analyst (SC-200) training course

Microsoft Security Operations Analyst (SC-200) Course

The Microsoft Security Operations Analyst (SC-200) course teaches you to detect, investigate, and respond to threats using Microsoft security tools. You will gain hands-on experience with Microsoft 365 Defender, Azure Defender, and Sentinel to strengthen organizational defenses. This instructor-led training prepares you for the SC-200 exam and the Microsoft Certified: Security Operations Analyst Associate certification.

9.5 (209 reviews)

Why Pay More??