Defender for CloudImplementing Defender for Cloud for AI agent protectionUnder review
Microsoft Defender for Cloud is a cloud-native application protection platform (CNAPP) with a set of security measures and practices designed to protect cloud-based applications from various cyber threats and vulnerabilities. Learn how to implement a development security operations (DevSecOps) solution that unifies security management at the code level across multi-cloud and multiple-pipeline environments. Learn how to enable a cloud security posture management (CSPM) solution that surfaces actions that you can take to prevent breaches and a cloud workload protection platform (CWPP) with specific protections for servers, containers, storage, databases, and other workloads.
MS Course ID: 00657
Last Updated: Oct 2, 2025
Course Syllabus
Improving your security posture with Microsoft Defender for Cloud
Module 1: Cloud Security Posture Management
Introduction to Zero Trust
Introduction to Microsoft Defender for Cloud
CNAPP strategy
Microsoft Defender Cloud Security Posture Management
Posture management for serverless resources
Unified cloud security posture management
Microsoft Defender for Cloud expands in the Defender portal
Module 2: Cloud Workload Protection
Cloud security challenges
Microsoft Defender Cloud Workload Protection
Overview of
Hands-on Labs
Protecting cloud workloads with Microsoft Defender for Cloud
Module 2: Cloud Workload Protection
Microsoft Defender for APIs - 20 min
Application Infrastructure Protection - 30 min
Module 3: Data Security Posture Management
Automatic discovery
DSPM in Defender CSPM
Attack Path Analysis and Scenarios
Cloud Security Explorer
Data sensitivity settings
Module 4: Pricing Defender for Cloud (BCB)
Pricing for Cloud Security Posture Management
Pricing for Cloud Workload Protection
Module 5: Policy Management of MDC
Security policies and recommendations
Microsoft Cloud Security Benchmark v2 (Preview)
Identifying and analyzing risks across your environment
Overview of Security alerts and incidents
Hands-on Labs
Enhancing security with integrated solutions
Module 6: Secure your AI Applications
AI security posture
Threat protection for AI agents (Preview)
AI model security & Defender AI model scanning (Preview)
Agent 365 : observe, govern, secure agents
Local agent & MCP discovery via Defender
Agent context mapping & runtime blocking
Module 7: Integration with Microsoft Sentinel and Data lake
Security alerts and Incidents in Microsoft Sentinel
Integration with Microsoft Sentinel data lake
Module 8: Defender for DevOps
Managing & connecting your DevOps environments
GitHub Advanced Security integration
Agentic vulnerability scanning - MDASH (Preview)
Module 9: External Attack Surface Management
Defender EASM • Discovery • Inventory
Module 10: Security Copilot in Defender for Cloud
How Security Copilot works • Copilot in Defender for Cloud
Copilot agents: Alert Triage & Dynamic Threat Detection
Defender Chat experience (Preview)
Module 11: Defender for Threat Intelligence
Defender TI Capabilities and features
Hands-on Labs
What You'll Learn
Course Details
- Duration
- 12 hours
- Level
- Intermediate
- Role
- Technical
- Readiness Stage
- Project Ready
- Audience Segment
- Enterprise, SMB
- FY27 Key Workload (Core)
- Security (Defender, Purview, Sentinel), Security for Business Premium (Defender, Purview), Apps + Infra + Data + Sovereign Cloud + Defender
- Course Stage
- Under review
- Available on
- Sep 30, 2026
- Hands-on Labs
- Yes
- Labs Platform
- Spektra
- ESI Course Code
- DW-310