SC-100: Microsoft Cybersecurity Architect

Module 1: Zero Trust and best Practice Frameworks

1. Common Cyberthreats and attack patterns
2. Zero-Trust Security Principles, MCRAand MCSB to fix the Cyberthreats and Attacks
3. Understanding Security Components,Controls and Features to protect On-premises, Cloud Infrastructure (Azure,Microsoft 365 and Multicloud)
4. Design Resiliency strategy forcyberattacks using Microsoft security best practices

Module 2:   DesignIdentity Security and Compliance capabilities

1. Security Controls for CredentialStealing and Credential Sharing
2. Security Controls for IdentityRisk
3. Privileged Access Model
4. Cloud Infrastructure Entitlement
5. Privileged Access Workstationsand Bastions
6. Security for Active DirectoryDomain Services from common directory service attack
7. Solutions manage secrets, keysand certificates
8. Modern authentication andAuthorization strategies

Module 3: Design security for Infrastructure andApplications

1. Security Solutions  for Network segmentations    
2. Solutions for Network security Posture  management    
3. Security Solutions for Servers, Virtual  Machines, App Services, Containers  
4. Security Solution for Web applications  attack    
5. Security Solution for Protecting Entire  network infrastructure from DDOS Attack

Module 4: Design Security Storage andOrganization’s data

1. Security for Servers and VirtualMachines Disk  
2. Security for Storage Services (Blob, Table, Queue andfiles)
3. Security for Storage Services (Blob, Table, Queue andfiles)
4. Security for data in transit

Module 5:  Design Security for Microsoft 365

1. Security Architecture of Microsoft 365Services (Exchange, SharePoint, Teams and Other Applications)
2. Design Microsoft XDR and PurviewSolution to Secure and Maintain Compliance of Microsoft 365 Services (Exchange,SharePoint, Teams)
3. Implement Security for Operational Practices ofMicrosoft 365
4. Design security Control for Microsoft365 Co-Pilot Services

Module 6: DesignSecurity for Endpoint Devices

1. Design Security Architecture for EndPoint Devices
2. Security baseline for End PointDevices
3. Evaluate the compliance of EndpointDevices
4. Security solutions for SecureRemote access
5. Endpoint devices securityupdates

Module 7: DesignSecurity Information and Event Management

1. Evaluate Security posture Of Cloud and On-premises Infrastructure
2. Monitor the Incidents and alerts ofsecurity threats
3. Automatic Investigation andResponse AIR
4. Hunt the threats in the EntireInfrastructure
5. Evaluate Security Score
6. Audit the Logs and Reports

‍

‍

Lab :1

• Protect password stealing and passwordsharing
• Apply Conditional Access
• Preventing the user and sign-in risks
• Apply privileged Access (Just in time)for Identity
• Securing Secrets, keys, certificatesusing vault

Lab :2

• Design and Implement Azure FirewallAppliance
• Design and Implement Traffic Filtering forServers, Virtual Machines and Subnets
• Design and Implement Web ApplicationFirewall
• Design and Implement DDOS ProtectionService
• Design and Implement Bastion Host Services
• Design and Implement Just in Time access

Lab:3

• Apply Encryption for Data At rest
• Apply Encryption for Data in transit
• Apply Firewall, Keys, certificates for APIand Databases

Lab:4

• Apply Threat and Security Policies forMicrosoft 365 Services
• Apply Rights to Access the Sensitive data inMicrosoft 365 Services
• Apply Policies to Prevent Data loss
• Apply Policies for Secured Communicationusing Microsoft 365 Services

Lab :5

• Apply Endpoint Firewall
• Apply Endpoint Encryption
• Apply Endpoint Antivirus and MalwareSolution
• Apply Endpoint Attack Surface Reduction policy
• Apply Account Protection Policy
• Apply Endpoint Compliance Policy
• Apply Endpoint Baseline Policy

‍