Overview What You Will Learn Curriculum Instructor

Course Overview

Identity has become a critical security boundary for modern cloud environments, particularly as organizations increasingly rely on Microsoft Entra ID, Microsoft 365, MFA, Conditional Access, and device-based access controls. Understanding identity attacks and implementing strong identity security are therefore essential for protecting users, applications, and organizational resources. This course begins with the evolving identity attack surface and modern identity attacks such as password spraying, MFA fatigue, token theft, and session hijacking. It then covers Microsoft Entra ID fundamentals, MFA, Conditional Access, device-based access control, Identity Protection, session controls, authentication troubleshooting, and identity attack simulations. The course concludes with Zero Trust identity strategy and guidance for continuing a Microsoft identity career. You will learn to identify identity-based threats, configure Microsoft Entra security controls, investigate authentication issues, simulate common attacks safely, and build a Zero Trust approach to identity security.

What You Will Learn

  • Understand Microsoft Entra ID fundamentals, modern authentication, and identity management concepts.
  • Configure and manage Multi-factor Authentication (MFA) and modern authentication methods.
  • Design, implement, and troubleshoot Conditional Access policies using real enterprise scenarios.
  • Implement device-based access control with Microsoft Entra and Microsoft Intune.
  • Protect identities using Microsoft Entra Identity Protection and risk-based security policies.
  • Investigate authentication events using Microsoft Entra Sign-in Logs and Identity Protection.
  • Simulate Password Spray and MFA Fatigue attacks in a safe lab environment.
  • Apply Zero Trust principles to build secure Microsoft Entra identity solutions.

Program Curriculum

  • Introduction
  • Learning Outcomes
  • Welcome to the Course
  • Why Identity is the New Attack Surface
  • We Had MFA... So Why Were We Breached?
  • Chapter 1 Quiz

  • Learning Outcomes
  • Introduction to Modern Identity Attacks
  • Understanding Password Spray Attacks
  • Understanding MFA Fatigue Attacks
  • Token Theft & Session Hijacking
  • Identity Security Best Practices
  • Chapter 2 Quiz

  • Learning Outcomes
  • Introduction to Microsoft Entra ID
  • Users, Groups & Administrative Roles
  • Authentication vs. Authorization
  • Understanding Authentication Tokens
  • Preparing the Microsoft Entra Lab Environment
  • Lab Environment Overview
  • Lab: Create Your Microsoft 365 Tenant
  • Lab: Build Lab Environment
  • Lab: Weak Identity Setup
  • Chapter 3 Quiz

  • Learning Outcomes
  • Introduction to Multi-factor Authentication (MFA)
  • Microsoft Authenticator & Authentication Method
  • How MFA Works in Microsoft Entra
  • Common MFA Configuration Mistakes
  • MFA Best Practices
  • Lab: MFA Not Triggering (Failure Scenario)
  • Lab: Enforce MFA with Conditional Access (Fix)
  • Lab: MFA Fatigue Awareness (Safe Simulation)
  • Chapter 4 Quiz

  • Learning Outcomes
  • Introduction to Conditional Access
  • Understanding Conditional Access Signals
  • Grant Controls & Session Controls
  • How Conditional Access Evaluates Policies
  • Common Conditional Access Mistakes
  • Conditional Access Best Practices
  • Lab: Conditional Access Policy Not Applying
  • Lab: Access Still Allowed (Policy Exists but Not Blocking)
  • Lab: Admin Lockout Scenario
  • Chapter 5 Quiz

  • Learning Outcomes
  • Why Device Trust Matters
  • Microsoft Entra Joined, Hybrid Joined & Registered Devices
  • Device Compliance & Microsoft Intune
  • Conditional Access with Device
  • Device Security Best Practices
  • Lab: Access from Unmanaged Device
  • Lab: Require Compliant Device for Access
  • Chapter 6 Quiz

  • Learning Outcomes
  • Introduction to Microsoft Entra ID Protection
  • Understanding User Risk & Sign-in Risk
  • How Risk-based Conditional Access Works
  • Investigating Identity Risks
  • Identity Protection Best Practices
  • Lab: Simulate Unusual Sign-in Activity
  • Lab: Block High-risk User
  • Chapter 7 Quiz

  • Learning Outcomes
  • Introduction to Session Control
  • Conditional Access App Control
  • Monitoring User Session
  • Restricting User Activities
  • Session Control Best Practices
  • Lab: Block Downloads
  • Lab: Monitor Session Activity
  • Chapter 8 Quiz

  • Learning Outcomes
  • Understanding Microsoft Entra Sign-in Logs
  • Authentication Investigation & Troubleshooting
  • Troubleshooting Multi-factor Authentication
  • Authentication Investigation Workflow
  • Authentication Troubleshooting Best Practices
  • Lab: Investigate Conditional Access Failure
  • Lab: Analyze MFA Failure
  • Chapter 9 Quiz

  • Learning Outcomes
  • Understanding Identity Attack
  • Password Spray Attack Walkthrough
  • MFA Fatigue Attack Walkthrough
  • Responding to Identity Attacks
  • Lab: Password Spray Simulation
  • Lab: Investigate MFA Push Bombing
  • Chapter 10 Quiz

  • Learning Outcome
  • Understanding the Zero Trust Security Model
  • Building a Zero Trust Identity
  • Defense-in-Depth for Identity Security
  • Identity Security Best Practices
  • Chapter 11 Quiz

  • Learning Outcomes
  • Microsoft Certification Roadmap
  • Continuing Your Learning
  • Career Guidance & Next Steps
Load more modules

Instructor

Yasir Mehmood

Yasir holds industry-recognized certifications including GIAC GCIH, GSEC, GFACT, EC-Council CEH, CompTIA Security+, Microsoft SC-200, and MS-500. His teaching philosophy is simple: learn by doing. Through real-world enterprise labs, practical demonstrations, and step-by-step guidance, he helps learners understand not just how technologies work, but why and where they are applied. His goal is to empower cybersecurity professionals with practical skills, confidence, and expertise to advance their careers.

Join over 1 Million professionals from the most renowned Companies in the world!

certificate

Fastest Way to Level Up Your Cybersecurity Skills

Invest in your future with flexible subscription plans that give you access to the world’s largest online cybersecurity course library. Whether you're exploring cybersecurity courses for beginners or advancing your expertise,
access in-demand courses, practical labs, and CTF challenges designed to support continuous learning.

Monthly Plans
Annual Plans
Save 20% with our annual plans!

Pro

Build your cybersecurity skills with 900+ bite-sized courses and curated learning paths designed for continuous learning.

$ 69.00
Billed monthly or $599.00 billed annually
Get Started Now
Start your 7-day trial for $1

What is included

  • 880+ Premium Short Courses
  • 70+ Structured Learning Paths
  • Validation of Completion with all courses and learning paths
  • New Courses added every month
Early Access Offer

Pro +

Develop real-world cybersecurity skills through hands-on labs and CTF challenges designed for practical learning.

$ 79.00
Billed monthly or $699.00 billed annually
Get Started Now
Start your 7-day trial for $1

Everything in Pro, Plus:

  • 1600+ Hands-on lab exercises with guided instructions
  • 150+ CTF Challenges with detailed walkthroughs
  • New Hands-on Labs and Challenges added every month

Related Courses

  • Bootstrap 4 Quick Website Bootstrap Components Course
    Short Course

    Bootstrap 4 Quick Website Bootstrap Components Course

    Software Development

    Explore the basics of Bootstrap and learn to create a website...

    $49.99

    Beginner

    1 hr 30 m

  • CCNA - Understanding Routers and Switches
    Short Course

    CCNA - Understanding Routers and Switches

    Security Architecture and Operations

    A comprehensive guide to understanding the in-depth functioni...

    $49.99

    Intermediate

    2 hr 0 m

  • The Complete Full-Stack JavaScript Course
    Short Course

    The Complete Full-Stack JavaScript Course

    Software Development

    Learn full-stack web development using JavaScript (ReactJS, N...

    $79.99

    Beginner

    24 hr 17 m

  • React.JS for Ecommerce: Building a Store with React.JS
    Short Course

    React.JS for Ecommerce: Building a Store with React.JS

    DevSecOps

    From React.js Fundamentals to Crafting an Online Storefront

    $49.99

    Advanced

    3 hr 30 m

  • CISSP Certification Domains 5, 6, 7, and 8 Video Training
    Short Course

    CISSP Certification Domains 5, 6, 7, and 8 Video Training

    Cybersecurity

    This course is ideal for individuals who desire to pass the I...

    $69.99

    Intermediate

    6 hr 30 m

  • Helm 3 - Package Manager for Kubernetes
    Short Course

    Helm 3 - Package Manager for Kubernetes

    Software Development

    A must tool for every DevOps engineer

    $49.99

    Intermediate

    1 hr 27 m

  • Learn Ethical Hacking by Hacking Real Websites Legally
    Short Course

    Learn Ethical Hacking by Hacking Real Websites Legally

    Vulnerability Assessment and Pentesting

    Fun way to learn ethical hacking by playing online hacking ga...

    $69.99

    Beginner

    4 hr 18 m

  • Mastering Ansible Playbooks: Debugging and Security
    Short Course

    Mastering Ansible Playbooks: Debugging and Security

    Software Development

    Securing and Automating Linux and Windows Systems with Advanc...

    $99.99

    Advanced

    5 hr 34 m

1 50
View all