1Manage Identity and Access

• 1.1Identity Management with Microsoft Entra ID

  Understand Microsoft Entra ID (formerly Azure AD), the starting point of Azure security: tenants/users/groups, hybrid identity (sync), and external identities (B2B, plus Microsoft Entra External ID for customers; the older Azure AD B2C is closed to new tenants since May 2025). The basis of "Manage identity and access" in AZ-500.

• 1.2MFA and Conditional Access

  Understand multi-factor authentication (MFA) beyond passwords alone, and Conditional Access that controls access based on sign-in context (user, location, device, risk)—the core of Zero Trust.

• 1.3RBAC and Privileged Identity Management (PIM)

  Understand role-based access control (RBAC) that defines "who can do what," and Privileged Identity Management (PIM) that activates powerful roles only when needed—supporting least privilege.