Wesley Swann← All courses
The Hacking Coach course
The Consultant's Guide to Zero Trust: Office 365 Security and Conditional Access
Secure Office 365 with Zero Trust principles and Conditional Access policies.
Learning objectives
- Understand and apply the Zero Trust model to secure Office 365 environments.
- Configure and deploy Conditional Access policies for robust access control.
- Utilize Microsoft Intune and Defender tools to enforce device compliance and app protection.
- Implement advanced security scenarios and automate management with PowerShell and APIs.
- Align security strategies with Microsoft’s best practices for proactive threat protection and compliance.
Overview
This course, designed for consultants and IT professionals, provides a deep dive into implementing Zero Trust principles within Office 365 environments. You will gain hands-on experience configuring Conditional Access policies, leveraging Microsoft Intune for device compliance, and utilizing advanced security tools like Microsoft Defender. Learn how to automate security management using PowerShell and APIs, enhance data protection across Microsoft 365, and enforce secure access for administrators and guests. The course also covers aligning with Microsoft’s best practices, managing identity risks, and maintaining a proactive security posture to protect against modern threats. With 12+ hours of in-depth content, this course equips you to deliver cutting-edge security solutions for your clients.
Curriculum
Learning time: 12h 47m Total Learning Time
Understanding the Zero Trust Model59 minutes
- Core Principles of Zero Trust
- Zero Trust and Risk Mitigation
- Aligning Zero Trust with Microsoft Security Framew…
- Understanding its guiding principles: Verify Expli…
- Importance of Zero Trust for SMBs
- Comprehend the core principles of Zero Trust: Veri…
- Analyzing the Role of Zero Trust in Mitigating Ris…
Configuring and Deploying Conditional Access Policies51 minutes
- Developing Conditional Access Policies
- Leveraging Microsoft Entra ID for Access Control
- Implementing Key Conditional Access Scenarios
- Develop Conditional Access Policies to Manage User…
- Leveraging Microsoft Entra ID for Identity-Based A…
- Implementing Policies for Key Scenarios
Utilizing Microsoft Intune for Device Compliance and App Protection51 minutes
- Configuring Intune for Device Compliance
- Applying App Protection Policies
- Device Compliance Strategies
- Configuring Intune Policies to Enforce Device Comp…
- Applying App Protection Policies (MAM) to Secure C…
- Differentiate Between Open and Closed Architecture…
Implementing Advanced Conditional Access Scenarios50 minutes
- Securing MFA Registration Processes
- Securing MFA Registration Processes with Condition…
- Using Authentication Contexts for Step-Up Authenti…
- Using Authentication Contexts for Step-Up Authenti…
- Enforcing Device and Session Controls
- Enforcing Device and Session Controls
Automating Security Management with PowerShell and APIs41 minutes
- Managing Conditional Access Policies with PowerShe…
- Automating Tenant Setup and Compliance Checks
- Automate tenant setup, policy assignments, and com…
- Monitoring Policy Effectiveness with Microsoft API…
- Import and Manage Conditional Access Policies usin…
Enhancing Data Protection Across Microsoft 36552 minutes
- Implementing Sensitivity Labels and Retention P
- Implementing Sensitivity Labels, Retention Policie…
- Configuring Data Loss Prevention (DLP)
- Configuring Email Encryption for Secure Communicat…
- Managing Email Encryption for Secure Communication…
- Managing and Restricting Data Sharing Within and O…
Strengthening Threat Protection with Microsoft Defender Tools50 minutes
- Configuring Exchange Online Protection (EOP)
- Utilizing Endpoint Protection Strategies
- Implementing Alert Policies and Incident Response
- Configure Exchange Online Protection (EOP) and Mic…
- Utilizing Endpoint Protection Strategies
- Implement Alert Policies and Develop Effective Inc…
Enforcing Secure Admin and Guest Access50 minutes
- Implementing Phish-Resistant MFA for Administrator…
- Applying Policies for External Users
- Protecting Workload Identities with Location-Based…
- Implementing Phish-Resistant MFA for Administrator…
- Introduction to External User Policies
- Protect Service Accounts and Workload Identities U…
Maintaining a Proactive Security Posture49 minutes
- Reviewing Policies with Microsoft Secure Score
- Reviewing Policies with Microsoft Secure Score and…
- Monitoring User Behavior with Endpoint Manager Ana…
- Monitoring User Behavior and Device Compliance in
- Updating Policies for Emerging Threats
- Continuously Update Policies to Reflect New Securi…
Aligning with Microsoft’s Best Practices for Zero Trust43 minutes
- Following Microsoft’s Recommended Security Profile…
- Exploring Microsoft's Recommended Security Profile…
- Integrating Advanced Conditional Access Features
- Integrate Advanced Conditional Access Features suc…
- Staying Updated with Microsoft’s Evolving Security…
Identity Protection and Risk Management26 minutes
- Using Microsoft Entra Identity Protection for risk…
- Understanding User and Sign-in Risk Levels and Res…
- Automating Remediation for High-Risk Accounts with…
Continuous Access Evaluation (CAE) and Real-Time Security27 minutes
- Introduction to Continuous Access Evaluation (CAE)…
- Configuring CAE to Respond to Changing User or Dev…
- Monitoring CAE Activity Logs and Troubleshooting A…
Privileged Identity Management (PIM)26 minutes
- Configuring Microsoft Entra Privileged Identity Ma…
- Enabling Just-In-Time (JIT) Access for Privileged
- Customizing Approval Workflows for Sensitive Role
Zero Trust for Remote and Hybrid Workforces27 minutes
- Implementing Conditional Access Policies Tailored
- Understanding Intune Autopilot for Remote Device O…
- Securing VPN and Remote Desktop Protocol (RDP) wit…
Security Monitoring and Incident Response27 minutes
- Introduction to Microsoft Sentinel
- Understanding Detection Rules and Alerts in Micros…
- Implementing Automated Incident Response Workflows…
Regulatory Compliance and Governance27 minutes
- Mapping Zero Trust Policies to Industry Compliance…
- Understanding Microsoft Compliance Manager
- Configuring Data Governance Policies to Meet Legal…
Prerequisites and equipment
- Basic understanding of Office 365 and cloud computing concepts.
- Familiarity with IT security principles and network management.
- Prior experience with Microsoft tools like Azure AD and Intune is recommended but not required.
Ready to start The Consultant's Guide to Zero Trust: Office 365 Security and Conditional Access?
Self-paced, on The Hacking Coach.
Enroll now ↗