Learning path
Advanced Zero Trust with Microsoft 365
Skill Level
Advanced
Duration 1 hour 40 minutes
Updated Sep 29, 2026
About this learning path
This learning path is designed for security architects and engineers who already manage Microsoft 365 and Microsoft Entra and now need to defend at the architecture level. It takes a deep dive into identity, endpoint, application, data, infrastructure, network, and security operations, and covers Conditional Access, MFA, and device compliance in the context of today's threat landscape: identity-first intrusion, token theft, and adversary-in-the-middle.
Your instructors
Prerequisites
- Hands-on experience administering Microsoft Entra ID (users, groups, and app registrations)
- Hands-on experience with Microsoft identity and access management and security operations technologies.
- Familiarity with the Microsoft 365 security admin centers, Microsoft Entra, Intune, Purview, and Defender.
- A working understanding of Zero Trust principles: verify explicitly, use least privilege, assume breach.
What you'll learn
- Design and operate the Conditional Access policy engine as the enforcement core across all six pillars.
- Engineer risk- and signal-driven controls that adapt automatically, from identity through data.
- Remove standing privilege and govern the identity lifecycle at enterprise scale.
- Securing Agentic AI Workloads with Microsoft Entra Workload ID
- Build the cross-pillar visibility and automation fabric with Defender XDR, Sentinel, and Security Copilot.
- Prove the architecture end to end by defending a realistic multi-stage attack chain.