After this day you can act on Microsoft Defender for Cloud recommendations with purpose: you read the compliance dashboard, enable Defender for Cloud, filter traffic with security groups, open management ports only through just-in-time access and protect Key Vault and Azure SQL with private connections. That lets you show clearly which Microsoft cloud security benchmark controls are met. The course suits Azure administrators and security engineers who have to close compliance gaps on the technical side.
What you’ll take away.
- Read the regulatory compliance dashboard in Defender for Cloud and prioritise gaps
- Enable Defender for Cloud on a subscription and connect a Log Analytics workspace
- Filter network traffic with network security groups and restrict VM access with just-in-time access
- Secure Key Vault and Azure SQL with network settings and private endpoints
- Use the Azure Monitor Agent with data collection rules for security data
Your training in detail
- Who is it for?
- Azure administrators and security engineers who need to act on Defender for Cloud recommendations and show compliance requirements are met technically.
- Prerequisites
- You already work with Azure IaaS and PaaS services, know Azure security features and have a working knowledge of what compliance standards require.
- Format & planning
- Standard length: 1 training day. A different length can be arranged for companies.
Agenda: from understanding to application
Our independently developed agenda proposal. Focus areas, lab environment and scope are agreed before booking.
Regulatory compliance standards in Defender for Cloud and the Microsoft cloud security benchmark
Enabling Defender for Cloud and choosing plans
Creating and assigning network security groups
Azure Monitor Agent, data collection rules and Log Analytics
Just-in-time access to virtual machines
Key Vault networking and Azure SQL through a private endpoint
Starting from open compliance recommendations in a test environment, you close gaps one by one: you lock down open management ports with JIT, restrict access to Key Vault and connect an Azure SQL database privately only.
Exams, licences & credentials
The course prepares you for the Microsoft Applied Skills assessment of the same name, which runs as a hands-on lab. An assessment is part of the offer only if this is confirmed explicitly. Microsoft issues the credential. This is not an official Microsoft course unless the offer states otherwise.
Vendor references & review date
Sources checked on 2026-11-10. These sources describe the technology or external exam requirements. They do not imply a partnership with NextNowa.
Your learning content
These objectives describe the training topic. The specific syllabus, dates and trainer are agreed before booking; the written offer is binding.
Frequently asked questions
Which compliance standards are covered?
The focus is the Microsoft cloud security benchmark. Other standards in the dashboard are shown for context.
Is the course more about security or administration?
Both: you work as an administrator in the Azure portal, but every exercise closes a specific security gap.
Does SC-5002 Secure Azure services and workloads with Microsoft Defender for Cloud regulatory compliance controls: hardening Azure workloads include a certificate?
The course prepares you for the Microsoft Applied Skills assessment of the same name, which runs as a hands-on lab. An assessment is part of the offer only if this is confirmed explicitly. Microsoft issues the credential. This is not an official Microsoft course unless the offer states otherwise.