Microsoft Security, Compliance, and Identity Fundamentals Training Overview
This Microsoft Security, Compliance, and Identity Fundamentals training class (SC-900) teaches attendees the fundamentals of security, compliance, identity concepts, and related cloud-based Microsoft solutions. This course prepares students for the SC-900 exam for which every attendee receives a voucher.
Location and Pricing
Accelebrate offers instructor-led enterprise training for groups of 3 or more online or at your site. Most Accelebrate classes can be flexibly scheduled for your group, including delivery in half-day segments across a week or set of weeks. To receive a customized proposal and price quote for private corporate training on-site or online, please contact us.
In addition, some courses are available as live, instructor-led training from one of our partners.
Objectives
- Describe the shared responsibility and the defense-in-depth security models
- Describe the Zero-Trust model
- Describe the concepts of encryption and hashing
- Describe basic compliance concepts
- Understand the difference between authentication and authorization
- Describe the concept of identity as a security perimeter
- Describe identity-related services
- Describe what Azure AD does
- Describe the types of identities Azure AD supports
- Describe the authentication methods of Azure AD
- Describe multi-factor authentication in Azure AD
- Describe the password protection and management capabilities of Azure AD
- Describe Conditional Access in Azure AD
- Describe the benefits of Azure AD roles and role-based access control
- Describe the capabilities of identity governance in Azure
- Describe Privileged Identity Management
- Describe the capabilities of Azure Identity Protection
- Describe cloud security posture management
- Describe the capabilities of Microsoft Defender for Cloud
- Understand the Azure Security Benchmark and the security baselines in Azure
- Describe the security concepts for SIEM and SOAR
- Describe how Microsoft Sentinel provides integrated threat management
- Describe the pricing models of Microsoft Sentinel
- Describe the Microsoft 365 Defender service
- Describe the offerings of the Service Trust Portal
- Describe Microsoft's privacy principles
- Describe the Microsoft Purview compliance portal
- Describe data classification capabilities
- Describe records management
- Describe data loss prevention
- Describe insider risk management
- Describe communication compliance
- Describe information barriers
- Describe the eDiscovery capabilities of Microsoft Purview
- Describe the Azure Policy
- Describe Azure Blueprints
- Describe Microsoft Purview
Prerequisites
- General understanding of networking and cloud computing concepts
- General IT knowledge or any general experience working in an IT environment
- General understanding of Microsoft Azure and Microsoft 365
Outline
Expand All | Collapse All
Introduction
Security and Compliance Concepts
- The shared responsibility model
- Describe defense in depth
- The Zero Trust model
- Encryption and hashing
- Compliance concepts
Identity Concepts
- Authentication and authorization
- Identity as the primary security perimeter
- The role of the identity provider
- Directory services and Active Directory
- The concept of Federation
Services and Identity Types of Azure AD
- Azure Active Directory
- The available Azure AD editions
- Azure AD identity types
- Types of external identities
- Describe the concept of hybrid identity
Authentication Capabilities of Azure AD
- Authentication methods available in Azure AD
- Multi-factor authentication (MFA) in Azure AD
- Self-service password reset (SSPR) in Azure AD
- Password protection and management capabilities of Azure AD
Access Management Capabilities of Azure AD
- Conditional Access in Azure AD
- Benefits of Azure AD roles and role-based access control
The Identity Protection and Governance Capabilities of Azure AD
- Identity governance in Azure AD
- What are entitlement management and access reviews?
- The capabilities of Privileged identity Management
- Azure Identity Protection
Basic Security Capabilities in Azure
- Azure DDoS protection
- Azure Firewall
- Web Application Firewall
- Network segmentation in Azure
- Azure Network Security groups
- Azure Bastion and JIT Access
- Describe ways Azure encrypts data
The Security Management Capabilities of Azure
- Cloud security posture management
- Microsoft Defender for Cloud
- The enhanced security of Microsoft Defender for the Cloud
- The Azure Security Benchmark and security baselines for Azure
The Security Capabilities of Microsoft Sentinel
- Define the concepts of SIEM and SOAR
- Describe how Microsoft Sentinel provides integrated threat management
- Understand Sentinel costs
Threat protection with Microsoft 365 Defender
- Microsoft 365 Defender services
- Microsoft Defender for Office 365
- Microsoft Defender for Endpoint
- Microsoft Defender for Cloud Apps
- Microsoft Defender for Identity
- The Microsoft 365 Defender portal
The Service Trust Portal and Privacy at Microsoft
- The Service Trust Portal
- Microsoft's privacy principles
- Microsoft Priva
The Compliance Management Capabilities in Microsoft Purview
- The Microsoft Purview compliance portal
- Compliance Manager
- Describe use and benefits of compliance score
Information Protection and Data Lifecycle Management in Microsoft Purview
- Know your data, protect your data, and govern your data
- Data classification capabilities of the compliance portal
- Sensitivity labels and policies
- Data loss prevention
- Retention policies and retention labels
- Records management
Insider Risk Capabilities in Microsoft Purview
- Insider risk management
- Communication compliance
- Information barriers
The eDiscovery and Audit Capabilities of Microsoft Purview
- The eDiscovery solutions in Microsoft Purview
- The audit solutions in Microsoft Purview
Describe Resource Governance Capabilities in Azure
- Azure Policy
- The use of Azure Blueprints
- The capabilities in the Microsoft Purview governance portal
Conclusion
Training Materials
All Microsoft training students receive Microsoft official courseware.
For all Microsoft Official Courses taught in their entirety that have a corresponding certification exam, an exam
voucher is included for each participant.
Software Requirements
Attendees will not need to install any software on their computers for this class. The class will be conducted in a remote environment that Accelebrate will provide; students will only need a local computer with a web browser and a stable Internet connection. Any recent version of Microsoft Edge, Mozilla Firefox, or Google Chrome will work well.
