Understand how Microsoft Defender for Cloud strengthens AI security in Azure through posture management and integration with key governance and identity services.
In this module, you learn to:
- Identify the layers that make up AI workloads in Azure
- Recognize security risks unique to AI, including prompt injection, data leakage, and model misuse
- Explain how Microsoft Foundry provides guardrails and observability for AI models
- Describe how Microsoft Defender for Cloud, Microsoft Purview, and Microsoft Entra ID work together to secure and govern AI workloads
- Summarize how these services align to create a unified, defense-in-depth strategy for AI security in Azure
Learn how Microsoft Defender for Cloud extends protection to AI workloads across Azure. See how it discovers AI resources, assesses configuration risks, detects active threats, and integrates with Microsoft Defender XDR for unified investigation and response.
In this module, you learn to:
- Enable and configure the AI workloads plan in Microsoft Defender for Cloud
- Review AI resource insights in the Data & AI security dashboard
- Assess and improve AI posture with Cloud Security Posture Management (CSPM)
- Detect and respond to runtime threats using Cloud Workload Protection (CWP)
- Investigate AI-related alerts and incidents in Microsoft Defender XDR
Safeguard your AI workloads with Microsoft Foundry guardrails. Discover how to configure and validate content filters, blocklists, and Prompt Shields to protect sensitive data, ensure responsible model behavior, and continuously improve AI safety.
In this module, you learn to:
- Explain how guardrails secure model interactions in Microsoft Foundry
- Describe safety controls such as content filters, blocklists, and Prompt Shields
- Configure and validate custom guardrails for different workload types
- Evaluate guardrail effectiveness and refine configurations for continuous assurance
Secure Microsoft Foundry environments by applying layered protections across identity, secrets, networks, and diagnostics. This module explains how to manage access with Microsoft Entra ID and project roles, protect credentials with Key Vault, and isolate workloads through private network connections. It also covers enabling diagnostic logging to strengthen visibility and auditing. These practices help you build trusted, compliant AI environments that support collaboration safely.
In this module, you learn to:
- Define access boundaries using Microsoft Entra ID and role-based access control (RBAC)
- Manage project-level permissions within shared environments
- Secure secrets with Key Vault and managed identities
- Isolate workloads with managed virtual networks and Private Link
- Enable diagnostic logging for centralized visibility and investigation

Syllabus

Understand how Microsoft Defender for Cloud supports AI security and governance in Azure
- Introduction
- Understand AI services in Azure
- Understand AI security risks in Azure
- AI guardrails and protections in Azure
- How Azure security and governance tools support AI workloads
- Module assessment
- Summary
Protect AI workloads with Microsoft Defender for Cloud
- Introduction
- Enable the AI workloads plan
- Review insights in the Data & AI security dashboard
- Assess and improve AI security posture with Cloud Security Posture Management (CSPM)
- Detect AI threats at runtime with Cloud Workload Protection (CWP)
- Investigate AI security alerts with prompt evidence in Microsoft Defender XDR
- Module assessment
- Summary
Configure and manage guardrails in Microsoft Foundry
- Introduction
- Understand guardrails and Microsoft Content Safety
- Understand safety controls in Microsoft Foundry
- Try out built-in guardrails
- Create and manage blocklists in Microsoft Foundry
- Configure and apply guardrails in Microsoft Foundry
- Choose and refine the right guardrails for your AI workloads
- Module assessment
- Summary
Secure Microsoft Foundry environments
- Introduction
- Control access to Microsoft Foundry with Microsoft Entra ID
- Manage access within Microsoft Foundry projects
- Secure Microsoft Foundry secrets with Azure Key Vault (preview)
- Isolate networks with managed virtual network and Private Link
- Enable diagnostic logging in Microsoft Foundry
- Module assessment
- Summary