Prerequisites:

Before attending this course, students must have:

• General understanding of networking and cloud computing concepts.
• General IT knowledge or any general experience working in an IT environment.
• General understanding of Microsoft Azure and Microsoft 365.

Target Audience:

The audience for this course is looking to familiarize themselves with the fundamentals of security, compliance, and identity (SCI) across cloud-based and related Microsoft services. The content for this course aligns to the SC-900 exam objective domain. Candidates should be familiar with Microsoft Azure and Microsoft 365 and understand how Microsoft security, compliance, and identity solutions can span across these solution areas to provide a holistic and end-to-end solution.

Course Objectives:

Students will learn to:

• Describe security and compliance concepts
• Describe identity concepts
• Describe the services and identity types of Microsoft Entra ID
• Describe the authentication capabilities of Microsoft Entra ID
• Describe the access management capabilities of Microsoft Entra ID
• Describe the identity protection and governance capabilities of Microsoft Entra
• Describe core infrastructure security services in Azure
• Describe security management capabilities in Azure
• Describe the capabilities in Microsoft Sentinel
• Describe threat protection with Microsoft 365 Defender
• Describe Microsoft’s Service Trust portal and privacy capabilities
• Describe the compliance management capabilities in Microsoft Purview
• Describe information protection, data lifecycle management, and data governance capabilities in Microsoft Purview
• Describe the insider risk capabilities in Microsoft Purview
• Describe the eDiscovery and Audit capabilities in Microsoft Purview

Course Outline:

Module 1: Describe security and compliance concepts

• Describe the shared responsibility and the defense-in-depth security models.
• Describe the Zero-Trust model.
• Describe the concepts of encryption and hashing.
• Describe some basic compliance concepts.

Module 2: Describe identity concepts

• Understand the difference between authentication and authorization.
• Describe the concept of identity as a security perimeter.
• Describe identity-related services.

Module 3: Describe the function and identity types of Microsoft Entra ID

• Describe the function of Microsoft Entra ID.
• Describe the types of identities Microsoft Entra ID supports.

Module 4: Describe the authentication capabilities of Microsoft Entra ID

• Describe the authentication methods of Microsoft Entra ID.
• Describe multifactor authentication (MFA) in Microsoft Entra ID.
• Describe self-service password reset (SSPR) in Microsoft Entra ID.
• Describe the password protection and management capabilities of Microsoft Entra ID.

Module 5: Describe the access management capabilities of Microsoft Entra ID

• Describe Conditional Access in Microsoft Entra ID.
• Describe Microsoft Entra roles and role-based access control.

Module 6: Describe the identity protection and governance capabilities of Microsoft Entra

• Describe the identity protection and governance capabilities of Microsoft Entra ID.
• Describe Privileged Identity Management.
• Describe Permissions Management.

Module 7: Describe core infrastructure security services in Azure

• Learn how Azure security capabilities can protect the network
• Learn how Azure can protect your VMs
• Learn how to keep secrets safe with Azure Key Vault

Module 8: Describe the security management capabilities in Azure

• Describe Microsoft Defender for Cloud.
• Describe how security policies and initiatives improve cloud security posture.
• Describe how the three pillars of Microsoft Defender for Cloud protect against cyber threats and vulnerabilities.

Module 9: Describe the capabilities in Microsoft Sentinel

• Describe the security concepts for SIEM and SOAR.
• Describe how Microsoft Sentinel provides threat detection and mitigation.
• Describe Microsoft Security Copilot.

Module 10: Describe threat protection with Microsoft 365 Defender

• Describe the Microsoft 365 Defender service.
• Describe how Microsoft 365 Defender provides integrated protection against sophisticated attacks.
• Describe and explore Microsoft 365 Defender portal.

Module 11: Describe Microsoft’s Service Trust portal and privacy capabilities

• Describe the offerings of the Service Trust Portal.
• Describe Microsoft's Privacy principles.
• Describe Microsoft Priva.

Module 12: Describe the compliance management capabilities in Microsoft Purview

• Describe the Microsoft Purview compliance portal.
• Describe Compliance Manager.
• Describe the use and benefits of compliance score.
• Module 13: Describe information protection, data lifecycle management, and data governance capabilities in Microsoft Purview
• Describe data classification capabilities.
• Describe records management.
• Describe data loss prevention.
• Describe unified data governance.

Module 14: Describe the insider risk capabilities in Microsoft Purview

• Describe insider risk management
• Describe communication compliance

Module 15: Describe the eDiscovery and Audit capabilities in Microsoft Purview

• Describe the eDiscovery capabilities of Microsoft Purview.
• Describe the auditing capabilities of Microsoft Purview.