The AZ-500 training enables you to master Microsoft Azure security technologies in four days. This official Microsoft course covers identity security with Microsoft Entra ID and conditional access policies, virtual network protection with Azure Firewall and NSGs, data encryption with Azure Key Vault, security posture management with Microsoft Defender for Cloud, and advanced threat detection with Microsoft Sentinel. You acquire the skills to protect your organization’s cloud resources against current cyber threats.
Delivered in Geneva and Lausanne by MCT certified trainers, this AZ-500 training relies on intensive hands-on labs in Microsoft cloud environments. You configure risk-based conditional access policies, deploy Azure Firewall with application rules, manage secrets and certificates in Key Vault, activate Defender protection plans, and create analytics rules in Sentinel. The Azure Security Engineer Associate certification is included and validates your cloud security skills with employers in French-speaking Switzerland.
Module 1: Manage security controls for identity and access
Module 2: Manage Microsoft Entra application access
Module 3: Plan and implement security for virtual networks
Module 4: Plan and implement security for private access to Azure resources
Module 5: Plan and implement security for public access to Azure resources
Module 6: Plan and implement advanced security for compute
Module 7: Plan and implement security for storage
Module 8: Plan and implement security for Azure SQL Database and Azure SQL Managed Instance
Module 9: Implement and manage enforcement of cloud governance policies
Module 10: Manage security posture by using Microsoft Defender for Cloud
Module 11: Configure and manage threat protection by using Microsoft Defender for Cloud
Module 12: Configure and manage security monitoring and automation solutions
Cloud security has become the absolute priority for companies migrating to Azure. Cyber threats constantly evolve, hybrid architectures multiply attack surfaces, and Swiss regulatory requirements impose strict controls on data protection. Azure offers a comprehensive arsenal of security services that, when properly configured, provide enterprise-grade protection.
The AZ-500 training gives you the skills to secure identities, networks, data, and applications on Microsoft Azure in four days in Geneva or Lausanne. This official Microsoft course (MOC AZ-500) is designed for security engineers and Azure administrators who want to specialize in cloud environment protection.
Microsoft Entra ID constitutes the first line of defense in Azure. The AZ-500 training covers in depth the configuration of multi-factor authentication (MFA), risk-based conditional access policies, identity protection with Identity Protection, and privileged identity management with PIM (Privileged Identity Management). You learn to implement the Zero Trust model that continuously validates every access.
Workload identity management (managed identities, service principals) secures communication between Azure services without storing secrets in code. Entra ID Governance automates the identity lifecycle, access reviews, and entitlement management. These mechanisms are essential for organizations in French-speaking Switzerland that must balance agility and compliance.
Azure network security relies on a defense-in-depth architecture. Network security groups (NSGs) filter traffic at the subnet and interface levels. Azure Firewall inspects and controls outbound and east-west traffic. Azure DDoS Protection defends against volumetric attacks. Private Link and private endpoints isolate PaaS service access from the public network.
Data protection relies on Azure Key Vault for centralized management of secrets, certificates, and encryption keys. Encryption at rest (Storage Service Encryption, Transparent Data Encryption) and in transit (TLS) protects data at every stage. Data Loss Prevention (DLP) policies and Azure Information Protection classify and protect sensitive information according to their confidentiality level.
Microsoft Defender for Cloud provides a unified view of the security posture of your Azure, hybrid, and multi-cloud resources. The training covers activating protection plans (Defender for Servers, Defender for Storage, Defender for SQL), analyzing Secure Score, remediating recommendations, and configuring compliance policies aligned with ISO 27001, SOC 2, and Swiss regulations.
Microsoft Sentinel is a cloud-native SIEM (Security Information and Event Management) that collects, correlates, and analyzes security logs from all your sources. You learn to configure data connectors, create analytics rules to detect suspicious behavior, automate incident response with playbooks (Logic Apps), and investigate threats using hunting queries in KQL. This combination of Defender and Sentinel forms a comprehensive Security Operations Center (SOC) accessible to companies of all sizes.
The AZ-500 exam (Microsoft Azure Security Technologies) validates the Azure Security Engineer Associate title. It contains between 40 and 60 questions (multiple choice, scenarios, case studies, and labs) and lasts approximately 120 minutes. The passing score is 700 out of 1000. The certification is valid for one year and can be renewed free of charge via Microsoft Learn.
In Switzerland, where data protection and compliance are strategic priorities, this certification is highly sought after. Targeted roles include Azure security engineer, cloud security analyst, information security architect, and cybersecurity consultant. The financial, healthcare, and international organization sectors in Geneva and Lausanne particularly value this profile.
At ITTA, a Microsoft Learning Partner in Switzerland MCT certified trainers guide you through hands-on labs on real Microsoft cloud environments and official course materials (MOC). Sessions are held in-person in Geneva and Lausanne or via virtual classroom.
What are the prerequisites for the AZ-500 training?
Experience in Azure administration (AZ-104 level) is recommended. You should be familiar with virtual networks, storage, identity management, and Azure governance concepts. Basic knowledge of cybersecurity is a plus but not mandatory.
Is this training suitable for system administrators without a security background?
Yes, provided you have Azure administration experience. The course progressively builds security skills from fundamental concepts to advanced configurations. Many administrators take this training to add a security specialization to their profile.
Does the training cover Microsoft Sentinel in detail?
Yes. You learn to configure data connectors, create analytics rules, automate incident response with playbooks, and use KQL hunting queries. The labs provide a complete practical experience of Sentinel.
Is the certification recognized for cybersecurity positions in Switzerland?
Yes. The Azure Security Engineer Associate certification is recognized and valued in Switzerland for cloud security, SecOps, and compliance positions. It complements certifications like CompTIA Security+ and CISSP with Azure-specific expertise.
Is the training available as a virtual classroom?
Yes. ITTA offers the AZ-500 training in-person in Geneva and Lausanne as well as via virtual classroom with the same content, the same labs, and the same MCT trainer.
What is the difference between AZ-500 and SC-200?
AZ-500 covers Azure security broadly (identities, networks, data, platforms). SC-200 focuses specifically on security operations with Microsoft Defender and Sentinel. The two certifications are complementary for security professionals.
Does the training cover compliance with Swiss regulations?
The training covers compliance tools (Azure Policy, Regulatory Compliance in Defender for Cloud) applicable to Swiss requirements. Specific Swiss regulations (FINMA, LPD/nLPD) are discussed in the context of Azure compliance policies.
Monday to Friday
8:30 AM to 6:00 PM
Tel. 058 307 73 00
ITTA
Route des jeunes 35
1227 Carouge, Suisse
Monday to Friday, from 8:30 am to 06:00 pm.
