MS 500 part 1 Implement and manage identity and access 

Introduction

Create, configure, and manage users

Exercise - assign licenses to users

Exercise - restore or remove deleted users

Create, configure, and manage groups

Exercise - add groups in Azure Active Directory

Configure and manage device registration

Manage licenses

Exercise - change group license assignments

Exercise - change user license assignments

Create custom security attributes

Explore automatic user creation

Knowledge check

Summary and resources

Introduction

Examine authentication options in Microsoft 365

Examine provisioning options in Microsoft 365

Explore directory synchronization

Explore Azure AD Connect

Knowledge check

Summary

Introduction

Plan, design, and implement Azure Active Directory Connect

Implement manage password hash synchronization (PHS)

Implement manage pass-through authentication (PTA)

Demo - Manage pass-through authentication and Seamless Single Sign-On (SSO)

Implement and manage federation

Trouble-shoot synchronization errors

Implement Azure Active Directory Connect Health

Manage Azure Active Directory Connect Health

Knowledge check

Summary and resources

Introduction

Describe guest access and Business to Business accounts

Manage external collaboration

Exercise - configure external collaboration

Invite external users - individually and in bulk

Exercise - add guest users to directory

Exercise - invite guest users bulk

Demo - manage guest users in Azure Active Directory

Manage external user accounts in Azure Active Directory

Manage external users in Microsoft 365 workloads

Exercise - explore dynamic groups

Implement cross-tenant access controls

Configure identity providers

Implement and manage Entra Verified ID

Knowledge check

Summary and resources

Introduction

Manage user passwords

Enable pass-through authentication

Enable multifactor authentication

Explore self-service password management

Implement Azure AD Smart Lockout

Implement entitlement packages in Azure AD Identity Governance

Implement Conditional Access policies

Create and run an access review

Investigate authentication issues using sign-in logs

Knowledge check

Summary

Introduction

Administer FIDO2 and passwordless authentication methods

Explore Authenticator app and OATH tokens

Implement an authentication solution based on Windows Hello for Business

Exercise configure and deploy self-service password reset

Deploy and manage password protection

Configure smart lockout thresholds

Exercise - Manage Azure Active Directory smart lockout values

Implement Kerberos and certificate-based authentication in Azure AD

Configure Azure AD user authentication for virtual machines

Knowledge check

Summary and resources

Introduction

Plan security defaults

Exercise - Work with security defaults

Plan Conditional Access policies

Implement Conditional Access policy controls and assignments

Exercise - Implement Conditional Access policies roles and assignments

Test and troubleshoot Conditional Access policies

Implement application controls

Implement session management

Exercise - Configure authentication session controls

Implement continuous access evaluation

Knowledge check

Summary and resources

Introduction

Define a privileged access strategy for administrative users

Configure Privileged Identity Management for Azure resources

Exercise configure Privileged Identity Management for Azure Active Directory roles

Exercise assign Azure Active Directory roles in Privileged Identity Management

Exercise assign Azure resource roles in Privileged Identity Management

Plan and configure Privileged Access Groups

Analyze Privileged Identity Management audit history and reports

Create and manage emergency access accounts

Knowledge check

Summary and resources

Introduction

Define access packages

Exercise create and manage a resource catalog with Azure AD entitlement

Configure entitlement management

Exercise add terms of use acceptance report

Exercise manage the lifecycle of external users with Azure AD identity governance

Configure and manage connected organizations

Review per-user entitlements

Knowledge check

Summary and resources

Introduction

Review identity protection basics

Implement and manage user risk policy

Exercise enable sign-in risk policy

Exercise configure Azure Active Directory multi-factor authentication registration policy

Monitor, investigate, and remediate elevated risky users

Implement security for workload identities

Explore Microsoft Defender for Identity

Knowledge check

Summary and resources