Explore Azure AD groups, including security and Office 365 groups, and learn how static, dynamic user, and dynamic device memberships control access to resources and collaboration tools.

Azure AD Connect unites on-prem and cloud identities to synchronize users and enable single sign-on for hybrid access, providing a common identity with a single password.

Explore how Azure Active Directory Identity Protection uses threat intelligence, risk signals, and conditional access to automatically alert, block, or verify sign-ins when identities are compromised.

Explore zero trust principles and how conditional access gates secure cloud applications and data by never trust, always verify, with identity as the control plane and device-based authentication.

Explain how scope in Azure RBAC narrows access to management groups, subscriptions, resource groups, and resources, using roles such as reader and contributor and the idea of effective permissions.

Explore how Azure policies are defined, assigned, and evaluated, and how policy effects like audit, deny, modify, and append shape resource compliance across subscriptions, resource groups, and regions.

Enable locks on a storage account to prevent accidental deletion, selecting read-only or delete restrictions to safeguard critical data.

Explore a layered Azure network security strategy protecting workloads from internet traffic with private endpoints and DDoS protection. Use virtual network isolation and network security groups to control traffic flow.

Navigate Azure's user-defined routing to control traffic between subnets with custom routes and next hops, alongside default routes to send traffic to internet, VPN gateway, or network appliances.

Demonstrates enabling Azure disk encryption on a virtual machine by creating a Key Vault and key, configuring access policies, and applying encryption to the VM disks.

Explore Azure data storage service types, including blob, file, queue, and table storage, with data replication across regions and data lake capabilities for unstructured data.

Explore the limitations of storage account keys, such as blanket access and lack of temporary or service-specific controls, and learn why shared access signatures provide granular, temporary access.