Microsoft Cybersecurity Architect (SC-100)

Learn how to design a security operations strategy.

Lessons

• Introduction
• Understand security operations frameworks, processes, and procedures
• Design a logging and auditing security strategy
• Develop security operations for hybrid and multi-cloud environments
• Design a strategy for Security Information and Event Management (SIEM) and Security Orchestration
• Evaluate security workflows
• Review security strategies for incident management
• Evaluate security operations strategy for sharing technical threat intelligence
• Monitor sources for insights on threats and mitigations

After completing this module, students will be able to:

• Design a logging and auditing security strategy.
• Develop security operations for hybrid and multi-cloud environments.
• Design a strategy for Security Information and Event Management (SIEM) and Security Orchestration, A.
• Evaluate security workflows.
• Review security strategies for incident management.
• Evaluate security operations for technical threat intelligence.
• Monitor sources for insights on threats and mitigations.

Learn how to design an identity security strategy.

Lessons

• Introduction
• Secure access to cloud resources
• Recommend an identity store for security
• Recommend secure authentication and security authorization strategies
• Secure conditional access
• Design a strategy for role assignment and delegation
• Define Identity governance for access reviews and entitlement management
• Design a security strategy for privileged role access to infrastructure
• Design a security strategy for privileged activities
• Understand security for protocols

After completing this module, students will be able to:

• Recommend an identity store for security.
• Recommend secure authentication and security authorization strategies.
• Secure conditional access.
• Design a strategy for role assignment and delegation.
• Define Identity governance for access reviews and entitlement management.
• Design a security strategy for privileged role access to infrastructure.
• Design a security strategy for privileged access.

Learn how to evaluate a regulatory compliance strategy.

Lessons

• Introduction
• Interpret compliance requirements and their technical capabilities
• Evaluate infrastructure compliance by using Microsoft Defender for Cloud
• Interpret compliance scores and recommend actions to resolve issues or improve security
• Design and validate implementation of Azure Policy
• Design for data residency Requirements
• Translate privacy requirements into requirements for security solutions

After completing this module, students will be able to: 

• Interpret compliance requirements and their technical capabilities.
• Evaluate infrastructure compliance by using Microsoft Defender for Cloud.
• Interpret compliance scores and recommend actions to resolve issues or improve security.
• Design and validate implementation of Azure Policy.
• Design for data residency requirements.
• Translate privacy requirements into requirements for security solutions.

Learn how to evaluate security posture and recommend technical strategies to manage risk.

Lessons

• Introduction
• Evaluate security postures by using benchmarks
• Evaluate security postures by using Microsoft Defender for Cloud
• Evaluate security postures by using Secure Scores
• Evaluate security hygiene of Cloud Workloads
• Design security for an Azure Landing Zone
• Interpret technical threat intelligence and recommend risk mitigations
• Recommend security capabilities or controls to mitigate identified risks

After completing this module, students will be able to:

• Evaluate security postures by using benchmarks.
• Evaluate security postures by using Microsoft Defender for Cloud.
• Evaluate security postures by using Secure Scores.
• Evaluate security hygiene of Cloud Workloads.
• Design security for an Azure Landing Zone.
• Interpret technical threat intelligence and recommend risk mitigations.
• Recommend security capabilities or controls to mitigate identified risks.

Learn about architecture best practices and how they are changing with the Cloud.

Lessons

• Introduction
• Plan and implement a security strategy across teams
• Establish a strategy and process for the proactive and continuous evolution of a security strategy
• Understand network protocols and best practices for network segmentation and traffic filtering

After completing this module, students will be able to:

• Describe best practices for network segmentation and traffic filtering.
• Plan and implement a security strategy across teams.
• Establish a strategy and process for proactive and continuous evaluation of security strategy.

Learn how to design a strategy for securing server and client endpoints. 

Lessons

• Introduction 
• Specify security baselines for server and client endpoints
• Specify security requirements for servers
• Specify security requirements for mobile devices and clients
• Specify requirements for securing Active Directory Domain Services
• Design a strategy to manage secrets, keys, and certificates
• Design a strategy for secure remote access
• Understand security operations frameworks, processes, and procedures
• Understand deep forensics procedures by resource type

After completing this module, students will be able to: 

• Specify security baselines for server and client endpoints.
• Specify security requirements for servers.
• Specify security requirements for mobile devices and clients.
• Specify requirements for securing Active Directory Domain Services.
• Design a strategy to manage secrets, keys, and certificates.
• Design a strategy for secure remote access.
• Understand security operations frameworks, processes, and procedures.
• Understand deep forensics procedures by resource type.

Learn how to design a strategy for securing PaaS, IaaS, and SaaS services.

Lessons

• Introduction
• Specify security baselines for PaaS services
• Specify security baselines for IaaS services
• Specify security baselines for SaaS services
• Specify security requirements for IoT workloads
• Specify security requirements for data workloads
• Specify security requirements for web workloads
• Specify security requirements for storage workloads
• Specify security requirements for containers
• Specify security requirements for container orchestration

After completing this module, students will be able to:

• Specify security baselines for PaaS, SaaS and IaaS services.
• Specify security requirements for IoT, data, storage, and web workloads.
• Specify security requirements for containers and container orchestration.

Learn how to specify security requirements for applications.

Lessons

• Introduction
• Understand application threat modeling
• Specify priorities for mitigating threats to applications
• Specify a security standard for onboarding a new application
• Specify a security strategy for applications and APIs

After completing this module, students will be able to:

• Specify priorities for mitigating threats to applications.
• Specify a security standard for onboarding a new application.
• Specify a security strategy for applications and APIs.

Learn how to design a strategy for securing data.

Lessons

• Introduction
• Prioritize mitigating threats to data
• Design a strategy to identify and protect sensitive data
• Specify an encryption standard for data at rest and in motion

After completing this module, students will be able to:

• Prioritize mitigating threats to data.
• Design a strategy to identify and protect sensitive data.
• Specify an encryption standard for data at rest and in motion.