Explore Real Hands-on Environments

Hands-on Cloud Labs.

A cloud lab platform with 200+ guided labs in real AWS and Azure environments, plus Kubernetes and Docker. Zero setup, every step verified automatically.

Full CLI Access

Sandboxed Environments

Global Regions

Running Containers with docker run and kubectl

40 minutes

DockerBeginner

Running Containers with docker run and kubectl

Run nginx:alpine first with docker run then with kubectl run on the same VM, and see how Kubernetes maps onto Docker concepts.

Deploy Multi-Container Apps with Docker Compose

Author a compose.yaml that runs nginx, a Python API, and Postgres as a single declarative multi-service stack.

Auto-verified

Start Lab

Troubleshoot and Debug Terraform Configurations

55 minutes

TerraformIntermediate

Troubleshoot and Debug Terraform Configurations

Fix broken Terraform configurations with validate and fmt, enable debug logging to trace provider errors, resolve apply failures, and use terraform console for expression testing.

Auto-verified

Start Lab

Import Existing Infrastructure into Terraform State Management

55 minutes

TerraformIntermediate

Import Existing Infrastructure into Terraform State Management

Use Terraform import blocks and the legacy import command to bring pre-existing Azure resources under Terraform state management.

Linux Processes - Listing, Inspecting, and Terminating

List processes with ps, inspect /proc for a setsid sleep, and stop it with kill.

Auto-verified

Start Lab

Terraform Custom Validation and Check Blocks on AWS

1 hour

TerraformIntermediate

Terraform Custom Validation and Check Blocks on AWS

Write variable validation rules, add preconditions and postconditions to resources, attach output preconditions, and create check blocks on AWS.

Auto-verified

Start Lab

Challenge - Build and Use a Custom Terraform Module

40 minutes

TerraformIntermediate

Challenge - Build and Use a Custom Terraform Module

Build a reusable Terraform module for EC2 app tiers and deploy web and API instances using the module in AWS.

Auto-verified

Start Lab

Configure Terraform Remote State with S3 and DynamoDB Backend

50 minutes

TerraformIntermediate

Configure Terraform Remote State with S3 and DynamoDB Backend

Configure an S3 backend with DynamoDB locking for Terraform remote state, migrate local state, and verify encryption and locking behavior.

Linux Shell Basics - Commands, Paths, and Manual Pages

Open a Linux terminal, find your user and home, read the ls manual, and create, move, and link files.

Publish and Subscribe with Amazon SNS and SQS

Create SNS topics and SQS queues to publish messages and build a fan-out messaging pattern on AWS

Computer Hardware Essentials - CPU, Memory, and Virtualization

Count processors, measure memory, and identify whose hardware this is with nproc, free, and systemd-detect-virt.

Deploy Azure SQL Database with Terraform

Define and deploy an Azure SQL Server and database using Terraform with firewall rules, variables, and output values in this hands-on lab.

Publish and Consume Bicep Modules with Azure Container Registry

Create a private Bicep module registry using ACR to publish, version, and consume reusable infrastructure modules across deployments.

Auto-verified

Start Lab

Set Up a Domain Controller in Azure Using Virtual Machines

1 hour and 30 minutes

AzureIntermediate

Set Up a Domain Controller in Azure Using Virtual Machines

Promote two Windows Server VMs in an availability set to domain controllers, connecting through Azure Bastion after each reboot.

Container Apps KEDA Scaling with Service Bus Queue Workers

Scale Azure Container Apps from zero to five replicas using KEDA and Service Bus queue message count as the scaling trigger.

Build an Event-Driven Messaging Solution with Azure Service Bus

Create Service Bus queues and topics, build producer-consumer messaging, implement subscription filters, and handle dead-letter queues.

Azure Virtual Network Peering - Connect VNets for Secure Communication

Learn how to configure and test virtual network peering in Azure.

Exploring Nmap: Network Scanning and Security Auditing Essentials

Learn Nmap basics: discover hosts, scan ports, enumerate services, and detect vulnerabilities. Build practical network security auditing skills hands-on.

Deploy Linux VM with Networking using Azure CLI Script

Automate Azure infrastructure deployment with Bash scripting. Create a reusable script to deploy a Linux VM with networking using Azure CLI commands.

Challenge - Write and Apply Your First Terraform Configuration

Write a Terraform config to deploy a DynamoDB table with point-in-time recovery and tags, then verify the deployment.

Auto-verified

Start Lab

Challenge - Configure Remote State and Backend Migration

40 minutes

TerraformIntermediate

Challenge - Configure Remote State and Backend Migration

Migrate a Terraform project from local state to an Azure Storage backend and verify that remote state is fully operational.

Create and Configure Virtual Network and Subnets in Azure

Validate your Azure networking knowledge by creating a VNet with three properly segmented subnets in this challenge lab.

Auto-verified

Start Lab

Deploy a Storage Account with ARM Templates

45 minutes

Infrastructure as CodeIntermediate

Deploy a Storage Account with ARM Templates

Write and deploy an ARM template to create a Storage Account with a blob container. Apply your knowledge of parameters, variables, and nested resources.

Deploy and Configure Azure Load Balancer

Create a Standard Load Balancer with a public IP, configure backend pool, health probe, and load balancing rule to distribute traffic across two VMs.

Deploy an Azure Function with Cosmos DB Output Binding

Write and deploy an HTTP-triggered Azure Function that uses a Cosmos DB output binding to write documents to a pre-provisioned database.

Auto-verified

Start Lab

Challenge - Import and Refactor Existing Infrastructure with Terraform

1 hour

TerraformIntermediate

Challenge - Import and Refactor Existing Infrastructure with Terraform

Bring pre-existing Azure resources under Terraform management without recreating them, reconcile your configuration to a zero-change plan, then refactor the storage account into a reusable module.

Secure Web App with Managed Identity and Key Vault Challenge

Configure a web app to securely access secrets from Azure Key Vault using Managed Identity. Create secrets, configure access policies, and verify integration.

Auto-verified

Start Lab

Challenge - Validate and Secure a Terraform Configuration

50 minutes

TerraformIntermediate

Challenge - Validate and Secure a Terraform Configuration

Add variable validation, sensitive markers, postconditions, and check blocks to secure a Terraform configuration on Azure.

Implement Network Security Groups (NSGs) and Application Security Groups (ASGs) in Azure

Secure Azure VMs using Network Security Groups and Application Security Groups. Create rules, control traffic flow, and implement least privilege access.

Secure VM Access with Network Security Groups

Create and configure a Network Security Group to enable SSH access to a VM. Apply your knowledge of NSGs and security rules to secure the subnet.

Challenge - Configure Resources Using Variables and Expressions

Write a parameterized Terraform configuration using variables, complex types, for_each, and expressions to deploy a multi-subnet VPC on AWS.

Configure Custom DNS Settings for an Azure Virtual Network

Configure custom DNS servers for an Azure VNet, apply DNS settings at the VNet and NIC level, and verify name resolution between virtual machines

Deploy and Configure Azure Virtual Desktop (AVD) Session Hosts

Learn how to deploy and configure Azure Virtual Desktop (AVD) Session Hosts in this hands-on lab.

Creating Your First Virtual Machine in Azure Cloud

Create a Windows Server virtual machine in the Azure Portal, connect to it using RDP, and verify it is working with PowerShell.

Auto-verified

Start Lab

Deploy a Web App with Storage Account using ARM Templates

1 hour

Infrastructure as CodeIntermediate

Deploy a Web App with Storage Account using ARM Templates

Write an ARM template to deploy an App Service with a Storage Account. Configure connection strings using listKeys() and wire up app settings for secure access.

Install Your First Helm Chart on Kubernetes

Use Helm as a package manager - add a repo, install a sample app chart, override values, upgrade, roll back, and uninstall.

Configure and Manage Azure Internal Load Balancer for High Availability and Scalability

Understand how to configure and manage Azure Internal Load Balancer for high availability and scalability in this lab.

Use Speech Synthesis Markup Language (SSML) to Improve Azure AI Speech Generation

Learn how to use Speech Synthesis Markup Language (SSML) to improve Azure AI Speech Generation with voice selection, timing control, and emotional expressions.

Trace Your AI Applications and Collect User Feedback

Learn to implement OpenTelemetry tracing for AI applications using Azure AI Foundry, including automatic instrumentation and user feedback collection.

Managing Azure Blob Storage Operations with Azure CLI

Learn how to perform essential Azure Blob Storage operations using Azure CLI commands. Practice uploading, downloading, listing, and deleting blobs with batch operations.

Introduction to Terraform Modules

Learn how to create, use, and manage Terraform modules to organize and reuse infrastructure code effectively.

Auto-verified

Start Lab

Terraform Resource Dependencies and Lifecycle Rules on Azure

1 hour

TerraformIntermediate

Terraform Resource Dependencies and Lifecycle Rules on Azure

Build implicit dependencies through resource references, add explicit depends_on blocks, and configure lifecycle rules for Azure resources with Terraform.

Set Up Monitoring and Practice Viewing Logs and Metrics

Enable Application Insights on a Web App, configure health checks, generate traffic, and write KQL queries to analyze logs and metrics.

Implement a Canary Release for Azure Container Apps

Deploy a web app to Azure Container Apps and use traffic splitting to canary-release a new version while monitoring for errors.

Create and Deploy a REST API with Amazon API Gateway

Build a REST API using API Gateway with Lambda proxy integration, configure CORS, deploy to a stage, and test endpoints with curl.

Auto-verified

Start Lab

Deploy Azure Container Apps with Terraform

1 hour

TerraformIntermediate

Deploy Azure Container Apps with Terraform

Use Terraform to define and deploy an Azure Container App with ingress, secrets, environment variables, and scaling rules.

Configure Azure Monitor Alerts and Action Groups for App Service

Create metric alerts, log search alerts, and action groups to monitor an Azure App Service and respond to threshold breaches.

Configure Diagnostic Settings for Azure Resources

Enable diagnostic settings on Azure resources to send logs and metrics to a Log Analytics workspace, then query the data using KQL in this hands-on lab.

The Terraform Workflow - Validate, Format, Plan, Apply, and Destroy

Use terraform fmt, validate, plan, apply, and destroy to manage the full lifecycle of Azure resources from the command line.

Containerize and Deploy a Multi-Container Application to Azure Container Apps

Build Docker images for a restaurant menu app, push to ACR, and deploy frontend and backend containers to Azure Container Apps.

Creating User Defined Routes in Azure Route Tables

Learn how to implement Azure route tables and user-defined routes to redirect VM traffic through virtual network appliances for enhanced network control.

Writing Your First GitHub Actions Workflow

Learn GitHub Actions fundamentals by creating workflows with multiple triggers, custom inputs, and multi-job CI/CD pipelines in this hands-on lab

Auto-verified

Start Lab

Terraform Complex Types and Dynamic Expressions on AWS

1 hour

TerraformIntermediate

Terraform Complex Types and Dynamic Expressions on AWS

Define complex variable types, use for_each and count for resource iteration, apply splat expressions and dynamic blocks on AWS with Terraform.

Terraform Input Variables, Outputs, and Variable Precedence on AWS

Declare Terraform input variables with defaults, override values using tfvars and CLI flags, and expose outputs from a deployed DynamoDB table.

Auto-verified

Start Lab

Managing Sensitive Data in Terraform Configurations

1 hour

TerraformIntermediate

Managing Sensitive Data in Terraform Configurations

Mark variables as sensitive, inject secrets via environment variables, retrieve Key Vault secrets with data sources, and audit state file exposure on Azure.

Auto-verified

Start Lab

Creating and Using Local Terraform Modules for Azure Networking

50 minutes

TerraformIntermediate

Creating and Using Local Terraform Modules for Azure Networking

Build reusable local Terraform modules for Azure networking, define module inputs and outputs, and understand variable scope.

Deploy Your First Azure AI Service in a Container

Deploy Azure AI Services as containers on Azure Container Instances. Learn to configure and test portable AI deployments.

Create and Manage Azure Container Registry

Learn to create, configure and use Azure Container Registry to store, manage and deploy container images securely in the cloud.

Convert Text to Speech and Speech to Text with Azure AI Speech SDK in Python

Learn to implement text-to-speech synthesis and speech recognition using Azure AI Speech SDK in Python for voice-enabled applications.

Analyze Text Using Azure AI Language SDK in Python

Learn to extract key phrases, recognize entities, and detect PII in text using Azure AI Language SDK in Python for document analysis and privacy compliance.

Analyze Images with Azure AI Vision Image Analysis SDK and Python

Analyze images with Azure AI Vision Image Analysis SDK and Python. Learn to extract captions, tags, and objects using the latest SDK in a hands-on cloud lab.

Auto-verified

Start Lab

Configure Terraform Remote State with Azure Storage Backend

1 hour

TerraformIntermediate

Configure Terraform Remote State with Azure Storage Backend

Migrate Terraform state from local to Azure Storage, configure the azurerm backend with partial configuration, and observe state locking via blob leases.

Auto-verified

Start Lab

Transform Logs at Ingestion with DCRs Custom Tables and ASIM in Microsoft Sentinel

1 hour and 10 minutes

AzureAdvanced

Transform Logs at Ingestion with DCRs Custom Tables and ASIM in Microsoft Sentinel

Build a DCR with a custom table, write a transformKql to parse and drop noisy fields, and map output to an ASIM parser.

Drive Detections with Watchlists and Threat Intelligence in Microsoft Sentinel

Enrich Sentinel detections by uploading a watchlist, referencing it in a KQL rule with _GetWatchlist(), and adding threat-intelligence indicators.

Speed Up Docker Builds with Layer Caching and dockerignore

Refactor a slow Dockerfile to leverage layer caching, add a .dockerignore to shrink the build context, and inspect the resulting image with docker history and docker diff.

Externalize Docker Configuration with Environment Variables and Compose Secrets

Externalize Docker app config the 12-factor way using -e, --env-file, Compose env_file, and Compose secrets.

Docker Compose for Microservices with Scaling and Health Checks

Build a 4-service microservices stack with Docker Compose, scale replicas, add HEALTHCHECK and restart policies, and test failover and recovery.

Cap Container CPU and Memory at Run Time

Run containers under tight cgroup ceilings using docker run flags, watch live consumption with docker stats, and trigger the OOM killer to read exit code 137 as the SIGKILL fingerprint.

Add HEALTHCHECK to Dockerfiles for Reliable Services

Add HEALTHCHECK to a Dockerfile, observe container health states, and gate Compose service startup with depends_on condition service_healthy.

Use Docker as a Portable Runtime for One-Shot Commands

Run jq, BusyBox, and Python as one-shot containers, pipe data through them, and bind-mount host files without installing anything locally.

Terraform Providers - Configure, Version, and Lock Dependencies

Configure the AWS Terraform provider with version constraints, explore the dependency lock file, and upgrade provider versions safely.

Auto-verified

Start Lab

Manage Sentinel Detection-as-Code with Terraform

1 hour and 10 minutes

SecurityAdvanced

Manage Sentinel Detection-as-Code with Terraform

Manage Sentinel analytics rules, an automation rule, and a watchlist as version-controlled Terraform, then make a drift-free change and re-apply.

Auto-verified

Start Lab

Manage Resource Drift and Terraform State Operations

1 hour

TerraformIntermediate

Manage Resource Drift and Terraform State Operations

Detect resource drift, reconcile infrastructure changes, and perform Terraform state operations on Azure resources.

Auto-verified

Start Lab

Terraform Built-in Functions and Expressions in Practice

1 hour

TerraformIntermediate

Terraform Built-in Functions and Expressions in Practice

Use terraform console to explore string, collection, numeric, and filesystem functions, then apply them in real Azure configurations.

Understanding Terraform State Fundamentals

Write Terraform configuration to provision Azure resources, inspect the state file structure, and understand how state serves as the source of truth.

Deploying a Linux VM in Azure using Terraform

Learn to deploy an Azure Linux VM using Terraform while exploring advanced concepts like complex variables, data sources, dependencies, and multi-file configurations.

Introduction to Terraform on Azure

Learn the basics of Infrastructure as Code with Terraform by deploying an Azure storage account. Master essential commands and configuration concepts.

Auto-verified

Start Lab

Windows Server DNS and DHCP Configuration on Azure

1 hour and 15 minutes

AzureIntermediate

Windows Server DNS and DHCP Configuration on Azure

Install and configure DNS and DHCP server roles on Windows Server, create lookup zones, configure DHCP scopes, and test name resolution.

Understand Cluster DNS and Resolve Services by Name

Walk the Kubernetes FQDN ladder, resolve Services across namespaces, and compare ClusterIP versus headless DNS records using CoreDNS.

Connect Privately to Amazon S3 with a VPC Gateway Endpoint

Reach S3 from an isolated subnet via a free gateway endpoint, then lock buckets to that endpoint with policies.

Building Your First Express.js API: A Hands-On Introduction

Build your first Express.js API! Learn to set up a server, implement RESTful endpoints, and test them with curl in this hands-on lab.

Deploy a Full Azure Environment Using Bicep Infrastructure as Code

Write modular Bicep templates to deploy a VNet, App Service, SQL Database, and Key Vault, then deploy the full environment using Azure CLI.

Auto-verified

Start Lab

Hunt Threats with KQL and Promote a Hunt to a Detection Rule in Microsoft Sentinel

1 hour and 10 minutes

SecurityAdvanced

Hunt Threats with KQL and Promote a Hunt to a Detection Rule in Microsoft Sentinel

Run KQL hunting queries against seeded telemetry, save a hunt and bookmark, work the MITRE view, then promote a hunt to a scheduled rule.

Linux Networking and Firewall Configuration on Azure

Configure network interfaces, firewall rules with iptables and UFW, harden SSH, and troubleshoot with Linux networking tools.

Automate Secret Rotation with Azure Functions and Key Vault

Build an Azure Function triggered by Event Grid to automatically rotate secrets stored in Key Vault before they expire.

Build and Push Images to a Container Registry with Docker

Tag, push, and pull Docker images using a self-hosted registry, applying semver, latest, and content-addressed digest references.

Dockerize a Python Flask Web Application

Author a Flask Dockerfile from scratch with layer caching, .dockerignore, and split dev/prod variants using gunicorn for clean SIGTERM handling.

Advanced NoSQL Injection: Updating Multiple Product Reviews in OWASP Juice Shop

Learn how to exploit NoSQL Injection to update multiple product reviews in OWASP Juice Shop.

Creating a Web App on Azure App Service using Azure Portal

Learn how to create, configure, and deploy a web application using Azure App Service through the Azure Portal's interface.

Create an Azure Virtual Machine Scale Set

In this lab, you will create a Virtual Machine Scale Set in Azure with a custom scaling rule.

Getting Started with Azure Application Insights for App Service Monitoring

Learn to enable Application Insights on Azure App Service, explore live metrics and application maps, and analyze failures and performance to monitor your apps.

Expose a REST API as an MCP Server via Azure API Management

Import a REST API into Azure API Management and export it as an MCP server for AI agents to consume as tools

Set Up Staging Environment Using Azure App Service Deployment Slots

Learn to implement zero-downtime deployments using Azure App Service deployment slots for safe testing and seamless production updates.

Securing Azure Web Apps with Managed Identity and Key Vault

Store application secrets in Azure Key Vault and configure Managed Identity to securely retrieve them from App Service without exposing credentials.

Automate Bicep Deployments with GitHub Actions CI/CD Pipeline

Build a GitHub Actions CI/CD pipeline that lints, validates, previews, and deploys Bicep templates to Azure with approval gates.

Azure CLI Essentials: Managing Azure Resources with Command Line Tools

Master Azure CLI essentials by managing resource groups, deploying container apps and VMs, and managing resource states in this hands-on lab.

Deploying Azure Container Apps with Docker Hub Images

Learn to deploy containerized applications in Azure using Docker Hub images.

Managing Terraform State with Azure Storage Backend

Learn how to configure and use Azure Storage Account as a backend for storing Terraform state files securely in a team environment.

Azure Cosmos DB for NoSQL Database and Container Setup

Independently create an Azure Cosmos DB for NoSQL account, set up a database and container with a partition key, and add JSON items.

Connect Virtual Networks with VNet Peering

Configure bidirectional VNet peering between two virtual networks in different Azure regions. Verify connectivity by connecting from one VM to another via SSH.

Implementing Secure VM Access with Azure Bastion

In this lab, you will learn how to implement secure VM access with Azure Bastion using Azure portal.

Auto-verified

Start Lab

1 hour

Infrastructure as CodeBeginner

Deploying Your First ARM Template

Learn to write and deploy your first Azure ARM template using Azure CLI. This lab guides you in creating a Virtual Network, Subnet, and Route Table with parameters and variables.

Deploy an Azure Web App using an ARM Template

Learn how to deploy an Azure Web App using an ARM Template using Azure CLI

Understanding Terraform Resources and Data Sources on Azure

Create Azure resources with Terraform, query existing infrastructure using data sources, and combine both patterns in a single configuration.

Azure Files Share - Create, Mount, and Manage Snapshots

Create an Azure file share, upload files, generate mount commands, take snapshots, and restore previous file versions in this hands-on lab.

Azure Private Endpoints - Lock Down Your Storage and SQL

Create Private Endpoints for Azure Storage and SQL Database, disable public access, and verify private-only connectivity from a VM.

Secure Azure Storage with Private Endpoints

Create a Storage Account, disable public access, and configure a Private Endpoint for secure blob connectivity.

Imperative vs Declarative Pod Creation Side by Side

Create the same Pod three ways and see how kubectl run, dry-run YAML, and hand-written manifests all converge on apply.

Write Dockerfiles and Build Custom Images

Author a single-stage Dockerfile from scratch, build a tagged image for a static site, and observe layer caching in action.

Drive Your First Cluster with kubectl Verbs

Practice kubectl get, describe, and explain on a pre-built kind cluster before touching any YAML.

Inspect, Create, and Debug Your First Pod with kubectl

Author a Pod, watch its lifecycle, debug an ImagePullBackOff with describe, then prove a multi-container Pod shares localhost networking and an emptyDir volume.

Enable Application Logging and Diagnostics for Azure App Service

Configure diagnostic logging for an Azure App Service web app, stream logs in real-time, route them to Log Analytics, and write KQL queries to troubleshoot errors.

Your First Docker Containers - Pull, Run, and Manage

Pull images from Docker Hub, run named containers with published ports, exec into them, view logs, then stop and remove them cleanly.

Docker Container Networking - Bridges, Custom Networks, and DNS

Master Docker networking with the default bridge, user-defined bridges, embedded DNS, and network isolation.

Auto-verified

Start Lab

1 hour and 15 minutes

AWSBeginner

Create and Query a DynamoDB Table

Create a DynamoDB table, add items, and query data using partition keys, sort keys, and scans

Internal - Kubernetes Container Lab

Internal admin lab. Long-lived test bench for the vm-ide-k8s gallery image, host-side kind provisioning, and content-image scaffold. Not for public catalog.

Fix App Service to Function App Connectivity with VNet Integration

Troubleshoot and fix a broken connection between an Azure App Service and a Function App by configuring VNet Integration and access restrictions.

Build a Remote MCP Server with Azure Functions

Scaffold, build, and deploy a remote Model Context Protocol (MCP) server using Azure Functions and the Azure Developer CLI

Build a Serverless Image Processing Pipeline with Azure Functions

Auto-resize every image uploaded to Azure Storage using blob-triggered Functions, thumbnail generation, and Table Storage metadata.

Microsoft Entra ID - Create Users, Groups and Assign Roles

Create users and groups in Microsoft Entra ID, assign Azure RBAC roles at different scopes, and verify permissions.

Configure Conditional Access Policies and MFA in Microsoft Entra ID

Create Conditional Access policies in Microsoft Entra ID, enforce MFA requirements, define named locations, and analyze sign-in logs.

Auto-verified

Start Lab

Creating Presentations with Microsoft 365 Copilot in PowerPoint

30 minutes

Microsoft 365Beginner

Creating Presentations with Microsoft 365 Copilot in PowerPoint

Use Microsoft 365 Copilot to generate a full PowerPoint presentation, customize slides with AI images, and adjust tone for an executive audience.

Auto-verified

Start Lab

Crafting Effective Prompts for Microsoft 365 Copilot

45 minutes

Microsoft 365Intermediate

Crafting Effective Prompts for Microsoft 365 Copilot

Master the Goal + Context + Expectations + Source framework to write prompts that get better results from Copilot in Word, Excel, and PowerPoint.

Auto-verified

Start Lab

Using Microsoft 365 Copilot in Teams Meetings

45 minutes

Microsoft 365Intermediate

Using Microsoft 365 Copilot in Teams Meetings

Use Copilot to prepare for, participate in, and follow up on Teams meetings with AI-powered summaries and action items

Auto-verified

Start Lab

Analyzing Data with Microsoft 365 Copilot in Excel

35 minutes

Microsoft 365Beginner

Analyzing Data with Microsoft 365 Copilot in Excel

Use Copilot in Excel to generate formulas, create charts, and identify trends from a quarterly sales dataset using natural language prompts.

Auto-verified

Start Lab

End-to-End Business Workflow with Microsoft 365 Copilot

1 hour

Microsoft 365Advanced

End-to-End Business Workflow with Microsoft 365 Copilot

Complete a realistic cross-app business workflow using Copilot in Chat, Word, Excel, PowerPoint, and Outlook.

Auto-verified

Start Lab

Getting Started with Microsoft 365 Copilot in Word

30 minutes

Microsoft 365Beginner

Getting Started with Microsoft 365 Copilot in Word

Use Copilot in Word to draft a project proposal, rewrite content with tone adjustments, and generate a summary with key takeaways.

Auto-verified

Start Lab

Detect Multi-Stage Attacks with Microsoft Sentinel Fusion Rules

1 hour and 15 minutes

AzureAdvanced

Detect Multi-Stage Attacks with Microsoft Sentinel Fusion Rules

Configure Fusion source signals, create entity-mapped analytics rules, and trace multi-stage attack chains using the investigation graph in Microsoft Sentinel.

Process Real-Time Changes with Cosmos DB Change Feed and Azure Functions

Build an event-driven pipeline where Cosmos DB change feed triggers an Azure Function to create materialized views in a second container.

Auto-verified

Start Lab

Build a Text Classification Pipeline with Python and NLP

45 minutes

Artificial IntelligenceIntermediate

Build a Text Classification Pipeline with Python and NLP

Preprocess text data, vectorize with TF-IDF, and train Naive Bayes and SVM classifiers to detect SMS spam using scikit-learn pipelines.

Windows Active Directory Fundamentals - Users, Groups, and Group Policy

Create OUs, users, and security groups in Active Directory, then configure Group Policy Objects to enforce security settings.

Deploy and Query Azure Cosmos DB with the NoSQL API

Create a serverless Cosmos DB account, build a database and container, insert and query documents, and explore consistency levels in this hands-on lab.

Integrating Lambda with API Gateway to Build REST APIs

Short description under 160 chars for this lab

Build a Remote MCP Server with Azure Logic Apps Standard

Create a Logic App Standard, build workflows as MCP tools, configure API key authentication, and test the server from VS Code

Challenge - Start Vault and Store Your First Secret

Start a Vault dev server, enable the KV v2 secrets engine at a custom path, write a secret with multiple keys, and retrieve it via the API.

Auto-verified

Start Lab

Configure Multiple Terraform Providers with Aliases

1 hour

TerraformIntermediate

Configure Multiple Terraform Providers with Aliases

Define multiple AWS provider blocks with aliases, deploy S3 buckets across regions, and generate a report using the local provider.

Vault Authentication Methods - Token and Userpass

Explore the default token authentication method, enable and configure userpass auth, and compare human versus machine authentication patterns.

Auto-verified

Start Lab

Hunt for Living-off-the-Land Attacks with KQL in Microsoft Sentinel

1 hour and 30 minutes

AzureAdvanced

Hunt for Living-off-the-Land Attacks with KQL in Microsoft Sentinel

Write KQL hunting queries in Microsoft Sentinel to detect living-off-the-land attacks including encoded PowerShell and suspicious WMI activity.

Monitor App Service Health and Performance with Built-In Diagnostics

Configure Health Check, explore platform metrics, run App Service Diagnostics, and set up Auto Heal rules for an Azure web app.

Introduction to HashiCorp Vault - Install, Start, and Explore

Install Vault, start the dev server, explore the Web UI, and write, read, and manage secrets using the CLI and HTTP API.

Build a Serverless API with Azure Functions and API Management

Create an HTTP-triggered Azure Function, front it with API Management, and apply rate limiting and subscription key policies.

Automate Incident Response with Microsoft Sentinel Playbooks

Build a Logic App playbook that automatically responds to Microsoft Sentinel incidents triggered by a scheduled analytics rule.

Build and Deploy an ASP.NET MVC Application on Azure

Build an ASP.NET Core MVC app with Entity Framework Core CRUD operations and deploy it to Azure App Service with Azure SQL.

Auto-verified

Start Lab

Azure SQL Database Security Posture Assessment and Hardening

1 hour and 15 minutes

AzureAdvanced

Azure SQL Database Security Posture Assessment and Hardening

Assess and harden an Azure SQL Database by running vulnerability scans, classifying data, enabling Defender, configuring private endpoints, and enforcing TLS 1.2.

Introduction to Azure Data Explorer and KQL Queries

Create a free Azure Data Explorer cluster, ingest sample data, and write KQL queries to filter, summarize, and visualize time-series data.

Configure Service Bus Topic Subscriptions with Message Filtering

Create Service Bus topic subscriptions and configure SQL and correlation filter rules to route messages in an order processing scenario in this hands-on lab.

Introduction to Infrastructure as Code with Terraform on AWS

Write your first HCL configuration and deploy a DynamoDB table to AWS using Terraform's init, plan, and apply workflow.

Implement Azure Queue Storage Queues with the Python SDK

Use the Azure Storage Python SDK to create queues, send and receive messages, manage visibility and TTL, and handle poison messages.

Introduction to Kusto Query Language (KQL) in Azure Log Analytics

Learn KQL fundamentals by querying real log data in Azure Log Analytics using search, where, project, and summarize operators.

Auto-verified

Start Lab

Build a Multi-Protocol ISP Topology with OSPF and BGP Using FRRouting

1 hour and 30 minutes

Advanced

Build a Multi-Protocol ISP Topology with OSPF and BGP Using FRRouting

Deploy a 5-router ISP topology using FRRouting on Azure VMs and configure OSPF backbone routing with eBGP customer peering and route redistribution.

Automate Infrastructure Health Checks with Azure Logic Apps

Build an Azure Logic App workflow that runs scheduled infrastructure health checks using REST APIs and sends a daily health report via email

Build a Serverless CRUD API with API Gateway and Lambda

Create a REST API with API Gateway and Lambda functions that perform CRUD operations against a DynamoDB table.

Performing Cross-Site Scripting (XSS) Attacks using OWASP Juice Shop

Perform XSS attacks on OWASP Juice Shop to learn how to prevent XSS attacks in your applications in this hands-on lab.

Injection Challenge - OWASP Juice Shop

Put your skills to the test in this challenge lab by identifying, exploiting, and mitigating various injection vulnerabilities in the OWASP Juice Shop.

Advanced SQL Injection with OWASP Juice Shop: Extracting Schemas and Credentials

Extract the Database Schema and User Credentials using UNION-based SQL Injection

Blind SQL Injection using OWASP Juice Shop: Order the Christmas Special Offer of 2014

Learn how to perform Blind SQL Injection on OWASP Juice Shop to uncover hidden data and retrieve the Christmas Special Offer of 2014 using true/false queries.

NoSQL Injection Basics: NoSQL DoS and Exfiltration with OWASP Juice Shop

Learn the basics of NoSQL Injection by completing the OWASP Juice Shop's NoSQL DoS and Exfiltration challenges.

Union-Based SQL Injection: Logging in with a Temporary User in OWASP Juice Shop

Learn about Union-Based SQL Injection by solving the Ephemeral Accountant challenge in OWASP Juice Shop.

Introduction To SQL Injection: Login in to Admin Account Using OWASP Juice Shop

Learn the basics of SQL Injection by exploiting the OWASP Juice Shop application.

OWASP Broken Access Control - Manipulating User Actions

Learn how to exploit broken access control vulnerabilities to manipulate user actions, such as posting feedback or reviews on behalf of other users.

HTTP Parameter Pollution (HPP) - Manipulating Another User's Basket in OWASP Juice Shop

Learn how HTTP Parameter Pollution (HPP) exploits Broken Access Control to manipulate another user's shopping basket in OWASP Juice Shop.

Exploiting Hidden Vulnerabilities: Null Byte Injection and API Tampering in OWASP Juice Shop

Learn to exploit hidden vulnerabilities using Poison Null Byte Injection and API request tampering to uncover secrets and manipulate data in OWASP Juice Shop.

Server-Side Request Forgery (SSRF): Requesting Hidden Resources in OWASP Juice Shop

Learn to exploit SSRF vulnerabilities in OWASP Juice Shop by leveraging a Gravatar URL field to interact with restricted server-side resources.

Advanced XSS Techniques: Bypassing Client-Side and Server-Side Protection in OWASP Juice Shop

Explore advanced XSS techniques to bypass client-side and server-side protection in OWASP Juice Shop.

Persisted XSS via HTTP Header in OWASP Juice Shop

Learn persisted XSS via HTTP Header by finding and exploiting a vulnerability in OWASP Juice Shop.

CSP Bypass: Exploiting Content Security Policy Vulnerabilities in OWASP Juice Shop

Learn how to bypass Content Security Policies (CSP) to execute XSS attacks by exploiting weaknesses in the OWASP Juice Shop profile page.

API-Based XSS: Persisted XSS via API Calls in OWASP Juice Shop

Learn how to perform a persisted XSS attack by interacting directly with the OWASP Juice Shop API.

Improper Input Validation Basics: Exploring OWASP Juice Shop

Learn to exploit improper input validation in OWASP Juice Shop by registering as an administrator, obtaining a Deluxe Membership without payment, and manipulating payment fields.

Auto-verified

Start Lab

1 hour and 30 minutes

SecurityIntermediate

XSS Challenge - OWASP Juice Shop

Put your skills to the test in this challenge lab by identifying and exploiting various XSS vulnerabilities in the OWASP Juice Shop.

Creating your First S3 Bucket using AWS Console

In this lab, you will create your first S3 bucket using the AWS Console.

Create Your First AWS Lambda Function

Learn how to create and deploy your first AWS Lambda function from scratch.

Deploy Amazon EC2 Instance in AWS Cloud

Deploy Amazon EC2 Instance in AWS Cloud in this hands-on lab.

Introduction to AWS Step Functions

Learn how to create and configure AWS Step Functions using AWS Console.

Running AWS Lambda Functions On A Schedule

Learn how to run AWS Lambda functions on a schedule.

Working with AWS VPC Flow Logs to Log and View Network Traffic

Learn to configure AWS VPC Flow Logs to monitor network traffic in your AWS environment.

Launch an EC2 Instance using AWS Lambda Function

Learn how to create a Python Lambda function to automatically provision EC2 instances, demonstrating serverless automation for AWS infrastructure deployment.

Deploying Your First Microsoft Sentinel Workspace on Azure

Learn to set up Microsoft Sentinel workspace, connect it to a Log Analytics workspace, and prepare for advanced security monitoring and threat detection.

Creating and Deploying Azure Functions using Azure Functions Core Tools

In this lab, you will learn how to create and deploy Azure Functions using Azure Functions Core Tools.

Build a HTTP-Triggered Azure Logic App with Custom Response

Create an Azure Logic Apps that processes HTTP POST requests and returns customized JSON responses without writing code.

Getting Started with Azure Storage Account: Create and Manage Blob Storage

Learn to create an Azure Storage Account, set up blob containers, manage access levels, and upload files using the Azure Portal.

Creating and Running Scripts in Azure Automation Account Service

In this lab, you will create an Azure Automation Account resource and run a script in Azure Automation.

Provisioning a Container inside Azure Container Instance

Learn how to create and manage Azure Container Instances (ACI) to run containerized applications without managing servers.

Implementing Azure Resource Locks for Resource Protection

Learn how to implement and manage Azure Resource Locks to prevent accidental deletion and modification of critical resources in your Azure environment.

Create and Configure Virtual Network and Subnets in Azure

Learn how to create a Virtual Network and subnets in Azure, define IP ranges, and understand how subnets segment networks for better control and security.

Managing Azure Storage with Object Replication and Lifecycle Management

Learn to implement Azure Storage object replication and lifecycle management policies to optimize data storage and automate data movement.

Deploying and Managing Azure Key Vault

Learn how to deploy and manage Azure Key Vault to securely store application secrets, encryption keys, certificates, and other sensitive data.

Configuring VNet Integration for Azure App Service

Configure VNet Integration for Azure App Service in this hands-on lab and understand how to connect your App Service securely over a private network.

Implementing Private Network Access for Azure Web App

Setup private network access for Azure Web App and access it locally using Private Endpoint in this hands-on lab.

Creating your First Azure Virtual Desktop Solution

Learn to deploy Azure Virtual Desktop by configuring host pools, application groups, and workspaces to create a secure remote desktop environment.

Creating and Configuring Azure API Management Service

Learn how to create and manage Azure API Management Service in this hands-on lab.

Configure and Access Azure Virtual Desktop (AVD)

Configure AVD Host Pool for User Access and Connect to AVD using Web-based Remote Desktop Client in this hands-on lab.

Creating and Managing Azure Cosmos DB for Modern Cloud Applications

Learn how to create and manage Azure Cosmos DB for modern cloud applications in this hands-on lab.

Creating and Deploying Python Durable Function in Azure

Learn about Azure Durable Functions by creating and deploying a Python Durable Function.

Getting Started with Optical Character Recognition (OCR) using Azure AI Vision Service

Extract text from images using Azure AI Vision OCR and Vision Studio in a hands-on beginner lab.

Building Event-Driven Workflows with Azure Event Grid and Logic Apps

Build event-driven architecture and file processingautomation solutions by connecting storage blob events to Logic Apps using Azure Event Grid.

Deploy and Explore Azure AI Translator Service for Real Time Multilingual Text Translation

Deploy and explore Azure AI Translator Service for real-time multilingual text translation using Azure portal.

Introduction to Azure Storage Queues

Learn to create and manage Azure Storage Queues: enqueue, peek, dequeue, and delete messages using both the Azure Portal and the Azure CLI.

Securing Azure AI Services: Best Practices Configuration

Secure Azure AI Services with Private Endpoint Configuration and Network Isolation to prevent unauthorized public access and data leakage.

Analyze Forms and Documents with Azure AI Document Intelligence

Learn to provision Azure AI Document Intelligence and analyze documents using prebuilt models to automate data extraction and streamline workflows.

Sentiment Analysis with Azure AI Language Service

Learn to provision Azure AI Language resources and perform sentiment analysis and opinion mining using Azure AI Language Studio.

Create and Explore Azure AI Vision in Vision Studio

Create Azure Computer Vision resources and explore AI Vision Studio to test object detection, dense captions, and smart cropping capabilities.

Explore Azure AI Speech Capabilities in Azure AI Foundry

Explore Azure AI Speech text-to-speech, speech-to-text, translation, and pronunciation assessment features using Azure AI Foundry portal interface.

Create Your First Azure AI Search Index

Get started with Azure AI Search by creating your first search service, uploading data, and running basic search queries.

Building a Knowledge Store with Azure AI Search

Build Azure AI Search knowledge store with AI enrichment, projections, and analytics for book catalog data.

Building a Serverless Contact Form with Azure Storage and Functions

Build a fully functional serverless contact form using Azure Storage for static website hosting and data storage, paired with Azure Functions for serverless request processing.

Auto-verified

Start Lab

Creating a ChatGPT Clone with Next.js and Azure OpenAI

1 hour and 30 minutes

AzureIntermediate

Creating a ChatGPT Clone with Next.js and Azure OpenAI

Build an AI-powered chat app with image generation using Next.js, Azure AI Foundry, and DALL-E. Learn React state management and API integration.

Introduction to Amazon Virtual Private Cloud (VPC)

Learn to create and configure a custom VPC with public and private subnets, routing, and security controls.

Configure and Manage Public Application Load Balancer for High Availability and Scalability

Learn how to create an Application Load Balancer (ALB) in AWS, configure target groups, and route incoming traffic to pre-configured EC2 instances for efficient and scalable application delivery in this lab.

Allocating and Associating Elastic IP to an EC2 Instance

Learn how to allocate and attach an Elastic IP to an EC2 instance for consistent public access.

Investigating and Handling Incidents in Microsoft Sentinel

Learn to handle incidents in Microsoft Sentinel by investigating suspicious activity, analyzing IP insights, and automating responses with custom rules.

Creating Custom Analytics Rules and Investigating Incidents in Microsoft Sentinel

Learn how to create custom analytics rules in Microsoft Sentinel, map entities to enrich alerts, and investigate incidents generated from suspicious activities.

Enabling Data Connectors in Microsoft Sentinel

Enable Microsoft Sentinel data connectors, ingest data from various sources, and explore associated resources like analytics rules, workbooks, and playbooks.

Hacking Your Way Inside with Broken Authentication & Access Control

Learn how to exploit broken authentication and access control to gain unauthorized access to restricted resources in this hands-on lab.

Auto-verified

Start Lab

Master Cloud Security.

Build real-world proficiency with our enterprise-grade lab infrastructure.

200+ Hands-on Labs

Live Cloud Consoles

Skills Validation