5. Secure Azure Using Microsoft Defender for Cloud and Microsoft Sentinel (30-35%)

This critical phase covers the operational security tools that provide continuous monitoring, threat detection, and automated response. You will learn to manage security posture with Defender for Cloud and implement SIEM/SOAR capabilities with Microsoft Sentinel. As the largest domain on the exam (30-35%), mastering these tools is essential for maintaining a secure and compliant Azure environment.