Visão Geral

Este curso apresenta os fundamentos e práticas de segurança do Microsoft Entra ID, com foco em identidades, autenticação, privilégios, Conditional Access, MFA, monitoramento e proteção contra ataques de identidade.

Objetivo

Após realizar este curso, você será capaz de:

• Proteger identidades no Entra ID
• Configurar controles de acesso
• Identificar riscos de identidade
• Implementar mecanismos de segurança

Publico Alvo

• Cloud Security Professionals
• Administradores Microsoft Entra ID
• IAM Professionals
• SOC Analysts

Pre-Requisitos

• Conhecimentos de identidade e acesso
• Familiaridade com Microsoft Azure
• Conhecimentos básicos de Active Directory
• Noções de MFA
• Conhecimentos básicos de cloud security

Conteúdo Programatico

Module 1: Microsoft Entra ID Fundamentals

1. Microsoft Entra ID architecture
2. Tenants
3. Users
4. Groups
5. Applications
6. Service principals
7. Managed identities
8. Directory roles
9. Identity lifecycle
10. Entra ID security model

Module 2: Authentication Security

1. Authentication methods
2. Password authentication
3. Passwordless authentication
4. Multi-Factor Authentication
5. Authentication policies
6. Authentication strengths
7. Authentication risks
8. Identity protection
9. Authentication monitoring
10. Authentication hardening

Module 3: Conditional Access

1. Conditional Access architecture
2. Policy conditions
3. User and group targeting
4. Application targeting
5. Device conditions
6. Location conditions
7. Authentication controls
8. Session controls
9. Policy design
10. Conditional Access governance

Module 4: Privileged Identity Management

1. Privileged roles
2. Microsoft Entra roles
3. Privileged Identity Management
4. Just-in-Time access
5. Eligible assignments
6. Role activation
7. Privileged account monitoring
8. Privileged access reviews
9. Administrative controls
10. Privileged identity security

Module 5: Identity Threats

1. Password attacks
2. Credential theft
3. Token theft
4. Consent abuse
5. Application identity abuse
6. Privilege escalation
7. Account takeover
8. Persistence
9. Identity attack detection
10. Identity threat response

Module 6: Monitoring and Detection

1. Sign-in logs
2. Audit logs
3. Risk detections
4. Identity Protection
5. Security alerts
6. SIEM integration
7. Microsoft Sentinel concepts
8. Threat hunting
9. Detection rules
10. Identity monitoring

Module 7: Identity Governance

1. Access reviews
2. Entitlement management
3. Lifecycle workflows
4. Guest identity management
5. Application access
6. Privileged access governance
7. Identity lifecycle
8. Least privilege
9. Zero Trust
10. Governance best practices

Module 8: Practical Entra ID Security

1. Identity security assessment
2. Authentication configuration
3. Conditional Access policies
4. Privileged role assessment
5. Identity threat investigation
6. Sign-in log analysis
7. Access review
8. Detection configuration
9. Security validation
10. Entra ID security case studies