1. Home
  2. Lab library
  3. Advanced labs

Advanced labs

Advanced labs change security-critical settings such as Conditional Access, PIM and hybrid sync. Do them in a disposable tenant with break-glass accounts in place.

Showing 5 labs

Entra ID Security · Lab 03Conditional Access MFAStage, test in report-only and then enforce MFA policies safely, with break-glass exclusions first.Advanced120 minEntra ID Security · Lab 04FIDO2 and PasswordlessRoll out phishing-resistant authentication methods to your highest-risk directory roles.Advanced120 minEntra ID Security · Lab 06Automated DisablementBuild dry-run-first automation that disables accounts that never registered MFA, with circuit breakers.Advanced120 minEntra ID Security · Lab 07PIM and JIT AccessReplace standing admin rights with role eligibility, approval workflows and time-bound elevation.Advanced110 minEntra ID Security · Lab 09Hybrid Identity HardeningProtect the bridge between on-premises Active Directory and Entra ID, the most abused identity path.Advanced120 min
Entra ID (12)PowerShell (3)MFA (3)Automation (2)Reporting (2)Microsoft Graph (1)Assessment (1)Authentication methods (1)Conditional Access (1)Break-glass (1)Passwordless (1)FIDO2 (1)SSPR (1)Domains (1)Recovery (1)Azure Automation (1)PIM (1)Privileged access (1)Just-in-time (1)Access reviews (1)Governance (1)Guests (1)Hybrid identity (1)Active Directory (1)Entra Connect (1)Detection (1)ID Protection (1)Defender for Identity (1)Secure Score (1)Roadmap (1)