Cloud Frontier Asia Request Security Assessment

Build practical Microsoft Security skills

Join a live, instructor-led workshop with guided exercises in a prepared lab environment. Choose information protection and DLP or cyberthreat defence.

  • 4 hours including a 10-minute break
  • Intermediate
  • Online via Microsoft Teams
  • Guided hands-on Lab
View dates

CFA-6737

Microsoft Purview Information Protection and DLP

Classify sensitive information, publish sensitivity labels, and design and simulate data loss prevention policies in Microsoft Purview.

Learning outcomes

  • Explain the role of Microsoft Purview in data security and compliance.
  • Create sensitive information types and compare classification techniques.
  • Publish sensitivity labels with encryption and auto-labeling settings.
  • Design, simulate and refine DLP policies.
  • Apply classification, labels and DLP in a guided scenario.
View curriculum and prerequisites — CFA-6737

Modules

  1. Information security and compliance in Microsoft Purview
  2. Sensitive information types, exact data match and document fingerprints
  3. Sensitivity labels, encryption and auto-labeling
  4. DLP policy planning, simulation, alerts and monitoring
  5. Integrated information protection and DLP exercises

Who should attend

Microsoft 365 and information protection administrators; data security, governance and compliance practitioners; IT professionals responsible for classification, labeling and DLP.

Prerequisites

A computer with Microsoft Teams and a supported browser; dual screens recommended. Basic Microsoft 365 and data security knowledge, with familiarity using Microsoft Purview.

Enquire for pricing — CFA-6737View dates

CFA-6738

Microsoft Defender XDR Cyberthreat Defence

Connect incidents, alerts, endpoint evidence and KQL hunting in a guided Microsoft Defender XDR investigation and response workflow.

Learning outcomes

  • Triage and investigate incidents and alerts in Microsoft Defender.
  • Plan Defender for Endpoint deployment, onboarding, roles and groups.
  • Configure notifications, suppression and indicators.
  • Review automated investigation, remediation and device evidence.
  • Use advanced hunting with KQL to investigate and respond to threats.
View curriculum and prerequisites — CFA-6738

Modules

  1. Mitigate incidents using Microsoft Defender
  2. Deploy the Defender for Endpoint environment
  3. Configure alerts and detections
  4. Configure and manage automation
  5. Perform device investigations
  6. Integrated Defender XDR investigation and response lab exercises

Who should attend

Security operations analysts and incident responders; endpoint security administrators and security engineers; IT professionals supporting Microsoft Defender XDR adoption.

Prerequisites

A computer with Microsoft Teams and a supported browser; dual screens recommended. Experience with the Microsoft Defender portal and basic knowledge of Defender for Endpoint, Microsoft Sentinel and Windows. Prior KQL query-writing experience in Microsoft Sentinel is required.

Enquire for pricing — CFA-6738View dates

Workshop schedule

Choose an available event and select Register to complete registration on Teams. Times are shown in SGT (UTC+8).

New public workshop dates will be published soon. Enquire for upcoming sessions.