
Creating Your First Virtual Machine in Azure Cloud
Create a Windows Server virtual machine in the Azure Portal, connect to it using RDP, and verify it is working with PowerShell.
Access real cloud infrastructure for security testing, development, and architectural training. Zero setup, high fidelity.

Create a Windows Server virtual machine in the Azure Portal, connect to it using RDP, and verify it is working with PowerShell.

Secure Azure VMs using Network Security Groups and Application Security Groups. Create rules, control traffic flow, and implement least privilege access.

Author a Helm chart from a raw Kubernetes manifest set, then install, upgrade, and rollback the release on a local kind cluster.

Use Helm as a package manager - add a repo, install a sample app chart, override values, upgrade, roll back, and uninstall.

Configure AVD Host Pool for User Access and Connect to AVD using Web-based Remote Desktop Client in this hands-on lab.

Configure VNet Integration for Azure App Service in this hands-on lab and understand how to connect your App Service securely over a private network.

Learn how to deploy and configure Azure Virtual Desktop (AVD) Session Hosts in this hands-on lab.

Build automated deployment pipelines with GitHub Actions, configure approval gates, and deploy containerized apps to dev and production Azure environments.

Learn how to create a Virtual Network and subnets in Azure, define IP ranges, and understand how subnets segment networks for better control and security.

Understand how to configure and manage Azure Internal Load Balancer for high availability and scalability in this lab.

Learn how to use Speech Synthesis Markup Language (SSML) to improve Azure AI Speech Generation with voice selection, timing control, and emotional expressions.

Learn to implement OpenTelemetry tracing for AI applications using Azure AI Foundry, including automatic instrumentation and user feedback collection.

Learn how to perform essential Azure Blob Storage operations using Azure CLI commands. Practice uploading, downloading, listing, and deleting blobs with batch operations.

Learn how to create, use, and manage Terraform modules to organize and reuse infrastructure code effectively.

Learn how to implement Azure route tables and user-defined routes to redirect VM traffic through virtual network appliances for enhanced network control.

Deploy a Linux VM with networking using Azure PowerShell. Learn cmdlets, variables, and pipelines while creating NSGs, VNets, and NICs in Cloud Shell.

Build implicit dependencies through resource references, add explicit depends_on blocks, and configure lifecycle rules for Azure resources with Terraform.

Enable Application Insights on a Web App, configure health checks, generate traffic, and write KQL queries to analyze logs and metrics.

Deploy a web app to Azure Container Apps and use traffic splitting to canary-release a new version while monitoring for errors.

Build a REST API using API Gateway with Lambda proxy integration, configure CORS, deploy to a stage, and test endpoints with curl.

Use Terraform to define and deploy an Azure Container App with ingress, secrets, environment variables, and scaling rules.

Create metric alerts, log search alerts, and action groups to monitor an Azure App Service and respond to threshold breaches.

Enable diagnostic settings on Azure resources to send logs and metrics to a Log Analytics workspace, then query the data using KQL in this hands-on lab.

Use terraform fmt, validate, plan, apply, and destroy to manage the full lifecycle of Azure resources from the command line.

Build Docker images for a restaurant menu app, push to ACR, and deploy frontend and backend containers to Azure Container Apps.

Build a complete CI/CD pipeline by containerizing a Node.js app and deploying it to Azure Container Apps using GitHub Actions workflows.

Learn GitHub Actions fundamentals by creating workflows with multiple triggers, custom inputs, and multi-job CI/CD pipelines in this hands-on lab

Reserve a contiguous range of public IPs using a public IP address prefix, create individual addresses, and assign them to Azure resources.

Build reusable local Terraform modules for Azure networking, define module inputs and outputs, and understand variable scope.

Mark variables as sensitive, inject secrets via environment variables, retrieve Key Vault secrets with data sources, and audit state file exposure on Azure.

Define complex variable types, use for_each and count for resource iteration, apply splat expressions and dynamic blocks on AWS with Terraform.

Declare Terraform input variables with defaults, override values using tfvars and CLI flags, and expose outputs from a deployed DynamoDB table.

Migrate Terraform state from local to Azure Storage, configure the azurerm backend with partial configuration, and observe state locking via blob leases.

Deploy Azure AI Services as containers on Azure Container Instances. Learn to configure and test portable AI deployments.

Build an AI-powered chat app with image generation using Next.js, Azure AI Foundry, and DALL-E. Learn React state management and API integration.

Learn to create, configure and use Azure Container Registry to store, manage and deploy container images securely in the cloud.

Learn to implement text-to-speech synthesis and speech recognition using Azure AI Speech SDK in Python for voice-enabled applications.

Learn to extract key phrases, recognize entities, and detect PII in text using Azure AI Language SDK in Python for document analysis and privacy compliance.

Analyze images with Azure AI Vision Image Analysis SDK and Python. Learn to extract captions, tags, and objects using the latest SDK in a hands-on cloud lab.

Learn how to configure and test virtual network peering in Azure.

Reach S3 from an isolated subnet via a free gateway endpoint, then lock buckets to that endpoint with policies.

Configure the AWS Terraform provider with version constraints, explore the dependency lock file, and upgrade provider versions safely.

Use terraform console to explore string, collection, numeric, and filesystem functions, then apply them in real Azure configurations.

Write Terraform configuration to provision Azure resources, inspect the state file structure, and understand how state serves as the source of truth.

Learn to deploy an Azure Linux VM using Terraform while exploring advanced concepts like complex variables, data sources, dependencies, and multi-file configurations.

Learn the basics of Infrastructure as Code with Terraform by deploying an Azure storage account. Master essential commands and configuration concepts.

Install and configure DNS and DHCP server roles on Windows Server, create lookup zones, configure DHCP scopes, and test name resolution.

Configure custom DNS servers for an Azure VNet, apply DNS settings at the VNet and NIC level, and verify name resolution between virtual machines

Walk the Kubernetes FQDN ladder, resolve Services across namespaces, and compare ClusterIP versus headless DNS records using CoreDNS.

Build your first Express.js API! Learn to set up a server, implement RESTful endpoints, and test them with curl in this hands-on lab.

Write modular Bicep templates to deploy a VNet, App Service, SQL Database, and Key Vault, then deploy the full environment using Azure CLI.

Learn how to exploit NoSQL Injection to update multiple product reviews in OWASP Juice Shop.

Learn how to create, configure, and deploy a web application using Azure App Service through the Azure Portal's interface.

In this lab, you will create a Virtual Machine Scale Set in Azure with a custom scaling rule.

Learn to enable Application Insights on Azure App Service, explore live metrics and application maps, and analyze failures and performance to monitor your apps.

Import a REST API into Azure API Management and export it as an MCP server for AI agents to consume as tools

Configure a web app to securely access secrets from Azure Key Vault using Managed Identity. Create secrets, configure access policies, and verify integration.

Learn to implement zero-downtime deployments using Azure App Service deployment slots for safe testing and seamless production updates.

Store application secrets in Azure Key Vault and configure Managed Identity to securely retrieve them from App Service without exposing credentials.

Build a GitHub Actions CI/CD pipeline that lints, validates, previews, and deploys Bicep templates to Azure with approval gates.

Learn to deploy containerized applications in Azure using Docker Hub images.

Master Azure CLI essentials by managing resource groups, deploying container apps and VMs, and managing resource states in this hands-on lab.

Learn how to configure and use Azure Storage Account as a backend for storing Terraform state files securely in a team environment.

Independently create an Azure Cosmos DB for NoSQL account, set up a database and container with a partition key, and add JSON items.

Configure bidirectional VNet peering between two virtual networks in different Azure regions. Verify connectivity by connecting from one VM to another via SSH.

In this lab, you will learn how to implement secure VM access with Azure Bastion using Azure portal.

Learn to write and deploy your first Azure ARM template using Azure CLI. This lab guides you in creating a Virtual Network, Subnet, and Route Table with parameters and variables.

Learn how to deploy an Azure Web App using an ARM Template using Azure CLI

Create Azure resources with Terraform, query existing infrastructure using data sources, and combine both patterns in a single configuration.

Create an Azure file share, upload files, generate mount commands, take snapshots, and restore previous file versions in this hands-on lab.

Create a Storage Account, disable public access, and configure a Private Endpoint for secure blob connectivity.

Create Private Endpoints for Azure Storage and SQL Database, disable public access, and verify private-only connectivity from a VM.

Create the same Pod three ways and see how kubectl run, dry-run YAML, and hand-written manifests all converge on apply.

Author a single-stage Dockerfile from scratch, build a tagged image for a static site, and observe layer caching in action.

Practice kubectl get, describe, and explain on a pre-built kind cluster before touching any YAML.

Author a Pod, watch its lifecycle, debug an ImagePullBackOff with describe, then prove a multi-container Pod shares localhost networking and an emptyDir volume.

Pull images from Docker Hub, run named containers with published ports, exec into them, view logs, then stop and remove them cleanly.

Master Docker networking with the default bridge, user-defined bridges, embedded DNS, and network isolation.

Write your first HCL configuration and deploy a DynamoDB table to AWS using Terraform's init, plan, and apply workflow.

In this lab, you will learn how to create and deploy Azure Functions using Azure Functions Core Tools.

Learn how to create and manage Azure Container Instances (ACI) to run containerized applications without managing servers.

Create Conditional Access policies in Microsoft Entra ID, enforce MFA requirements, define named locations, and analyze sign-in logs.

Create users and groups in Microsoft Entra ID, assign Azure RBAC roles at different scopes, and verify permissions.

Use Copilot in Outlook to summarize email threads, draft context-aware replies, and extract action items from your inbox.

Use Microsoft 365 Copilot to generate a full PowerPoint presentation, customize slides with AI images, and adjust tone for an executive audience.

Master the Goal + Context + Expectations + Source framework to write prompts that get better results from Copilot in Word, Excel, and PowerPoint.

Use Copilot to prepare for, participate in, and follow up on Teams meetings with AI-powered summaries and action items

Complete a realistic cross-app business workflow using Copilot in Chat, Word, Excel, PowerPoint, and Outlook.

Use Copilot in Excel to generate formulas, create charts, and identify trends from a quarterly sales dataset using natural language prompts.

Use Copilot in Word to draft a project proposal, rewrite content with tone adjustments, and generate a summary with key takeaways.

Hunt for indicators of compromise in security logs using advanced KQL queries mapped to MITRE ATT&CK tactics.

Create a serverless Cosmos DB account, build a database and container, insert and query documents, and explore consistency levels in this hands-on lab.

Build an MCP App that returns interactive HTML interfaces and deploy it to Azure Functions in this hands-on lab.

Create a DynamoDB table, add items, and query data using partition keys, sort keys, and scans

Build a 3-tier restaurant menu app using Azure App Service, Functions, and Cosmos DB. Learn serverless APIs, NoSQL databases, and full-stack deployment.

Learn KQL fundamentals by querying real log data in Azure Log Analytics using search, where, project, and summarize operators.

Customize and deploy a personal portfolio website to Azure Static Web Apps using the Azure CLI

Use Bicep conditional expressions, for-loops, and what-if analysis to dynamically deploy and preview Azure infrastructure changes.

Use Azure Deployment Stacks to manage resource lifecycle as a single unit with detach and delete policies, state inspection, and stack cleanup.

Build a real-world Bicep template that deploys a VNet with subnets, NSG rules, a public IP, and a Linux VM with SSH access.

Master Bicep expressions by using parameters with decorators, variables, output values, and built-in functions to deploy flexible templates.

Learn Azure Bicep syntax by writing your first template to deploy a storage account with parameters, variables, and outputs using Azure CLI.

Learn to set up Microsoft Sentinel workspace, connect it to a Log Analytics workspace, and prepare for advanced security monitoring and threat detection.

Enable Microsoft Sentinel data connectors, ingest data from various sources, and explore associated resources like analytics rules, workbooks, and playbooks.

Learn how to create custom analytics rules in Microsoft Sentinel, map entities to enrich alerts, and investigate incidents generated from suspicious activities.

Learn to handle incidents in Microsoft Sentinel by investigating suspicious activity, analyzing IP insights, and automating responses with custom rules.

Create an Azure Logic Apps that processes HTTP POST requests and returns customized JSON responses without writing code.

Learn to create an Azure Storage Account, set up blob containers, manage access levels, and upload files using the Azure Portal.

In this lab, you will create an Azure Automation Account resource and run a script in Azure Automation.

Learn how to implement and manage Azure Resource Locks to prevent accidental deletion and modification of critical resources in your Azure environment.

Learn to implement Azure Storage object replication and lifecycle management policies to optimize data storage and automate data movement.

Learn how to deploy and manage Azure Key Vault to securely store application secrets, encryption keys, certificates, and other sensitive data.

Setup private network access for Azure Web App and access it locally using Private Endpoint in this hands-on lab.

Learn to deploy Azure Virtual Desktop by configuring host pools, application groups, and workspaces to create a secure remote desktop environment.

Learn how to create and manage Azure API Management Service in this hands-on lab.

Learn how to create and manage Azure Cosmos DB for modern cloud applications in this hands-on lab.

Learn about Azure Durable Functions by creating and deploying a Python Durable Function.

Extract text from images using Azure AI Vision OCR and Vision Studio in a hands-on beginner lab.

Build event-driven architecture and file processingautomation solutions by connecting storage blob events to Logic Apps using Azure Event Grid.

Deploy and explore Azure AI Translator Service for real-time multilingual text translation using Azure portal.

Learn to create and manage Azure Storage Queues: enqueue, peek, dequeue, and delete messages using both the Azure Portal and the Azure CLI.

Secure Azure AI Services with Private Endpoint Configuration and Network Isolation to prevent unauthorized public access and data leakage.

Create Azure Computer Vision resources and explore AI Vision Studio to test object detection, dense captions, and smart cropping capabilities.

Learn to provision Azure AI Document Intelligence and analyze documents using prebuilt models to automate data extraction and streamline workflows.

Learn to provision Azure AI Language resources and perform sentiment analysis and opinion mining using Azure AI Language Studio.

Explore Azure AI Speech text-to-speech, speech-to-text, translation, and pronunciation assessment features using Azure AI Foundry portal interface.

Get started with Azure AI Search by creating your first search service, uploading data, and running basic search queries.

Build Azure AI Search knowledge store with AI enrichment, projections, and analytics for book catalog data.

Build a fully functional serverless contact form using Azure Storage for static website hosting and data storage, paired with Azure Functions for serverless request processing.

Perform XSS attacks on OWASP Juice Shop to learn how to prevent XSS attacks in your applications in this hands-on lab.

Learn how to exploit broken authentication and access control to gain unauthorized access to restricted resources in this hands-on lab.

Put your skills to the test in this challenge lab by identifying, exploiting, and mitigating various injection vulnerabilities in the OWASP Juice Shop.

Extract the Database Schema and User Credentials using UNION-based SQL Injection

Learn how to perform Blind SQL Injection on OWASP Juice Shop to uncover hidden data and retrieve the Christmas Special Offer of 2014 using true/false queries.

Learn the basics of NoSQL Injection by completing the OWASP Juice Shop's NoSQL DoS and Exfiltration challenges.

Learn about Union-Based SQL Injection by solving the Ephemeral Accountant challenge in OWASP Juice Shop.

Learn the basics of SQL Injection by exploiting the OWASP Juice Shop application.

Learn how to exploit broken access control vulnerabilities to manipulate user actions, such as posting feedback or reviews on behalf of other users.

Learn how HTTP Parameter Pollution (HPP) exploits Broken Access Control to manipulate another user's shopping basket in OWASP Juice Shop.

Learn to exploit hidden vulnerabilities using Poison Null Byte Injection and API request tampering to uncover secrets and manipulate data in OWASP Juice Shop.

Learn to exploit SSRF vulnerabilities in OWASP Juice Shop by leveraging a Gravatar URL field to interact with restricted server-side resources.

Explore advanced XSS techniques to bypass client-side and server-side protection in OWASP Juice Shop.

Learn persisted XSS via HTTP Header by finding and exploiting a vulnerability in OWASP Juice Shop.

Learn how to bypass Content Security Policies (CSP) to execute XSS attacks by exploiting weaknesses in the OWASP Juice Shop profile page.

Learn how to perform a persisted XSS attack by interacting directly with the OWASP Juice Shop API.

Learn to exploit improper input validation in OWASP Juice Shop by registering as an administrator, obtaining a Deluxe Membership without payment, and manipulating payment fields.

Put your skills to the test in this challenge lab by identifying and exploiting various XSS vulnerabilities in the OWASP Juice Shop.

Learn Nmap basics: discover hosts, scan ports, enumerate services, and detect vulnerabilities. Build practical network security auditing skills hands-on.

Learn how to create an Application Load Balancer (ALB) in AWS, configure target groups, and route incoming traffic to pre-configured EC2 instances for efficient and scalable application delivery in this lab.

Learn how to allocate and attach an Elastic IP to an EC2 instance for consistent public access.

Learn how to create a Python Lambda function to automatically provision EC2 instances, demonstrating serverless automation for AWS infrastructure deployment.

Learn to configure AWS VPC Flow Logs to monitor network traffic in your AWS environment.

Learn how to run AWS Lambda functions on a schedule.

Learn how to create and configure AWS Step Functions using AWS Console.

Learn how to create and deploy your first AWS Lambda function from scratch.

Learn to create and configure a custom VPC with public and private subnets, routing, and security controls.

Deploy Amazon EC2 Instance in AWS Cloud in this hands-on lab.

In this lab, you will create your first S3 bucket using the AWS Console.
Build real-world proficiency with our enterprise-grade lab infrastructure.