Microsoft Cybersecurity Architect – MS-SC100T00

Learn how to build an overall security strategy and architecture.

Lessons

– Introduction

– Zero Trust overview

– Develop Integration points in an architecture

– Develop security requirements based on business goals

– Translate security requirements into technical capabilities

– Design security for a resiliency strategy

– Design a security strategy for hybrid and multi-tenant environments

– Design technical and governance strategies for traffic filtering and segmentation

– Understand security for protocols

– Exercise: Build an overall security strategy and architecture

– Knowledge check

– Summary

After completing this module, students will be able to:

– Develop Integration points in an architecture

– Develop security requirements based on business goals

– Translate security requirements into technical capabilities

– Design security for a resiliency strategy

– Design security strategy for hybrid and multi-tenant environments

– Design technical and governance strategies for traffic filtering and segmentation

Learn how to design a security operations strategy.

Lessons

– Introduction

– Understand security operations frameworks, processes, and procedures

– Design a logging and auditing security strategy

– Develop security operations for hybrid and multi-cloud environments

– Design a strategy for Security Information and Event Management (SIEM) and Security Orchestration,

– Evaluate security workflows

– Review security strategies for incident management

– Evaluate security operations strategy for sharing technical threat intelligence

– Monitor sources for insights on threats and mitigations

After completing this module, students will be able to:

– Design a logging and auditing security strategy

– Develop security operations for hybrid and multi-cloud environments.

– Design a strategy for Security Information and Event Management (SIEM) and Security Orchestration, A

– Evaluate security workflows.

– Review security strategies for incident management.

– Evaluate security operations for technical threat intelligence.

– Monitor sources for insights on threats and mitigations.

Learn how to design an identity security strategy.

Lessons

– Introduction

– Secure access to cloud resources

– Recommend an identity store for security

– Recommend secure authentication and security authorization strategies

– Secure conditional access

– Design a strategy for role assignment and delegation

– Define Identity governance for access reviews and entitlement management

– Design a security strategy for privileged role access to infrastructure

– Design a security strategy for privileged activities

– Understand security for protocols

After completing this module, students will be able to:

– Recommend an identity store for security.

– Recommend secure authentication and security authorization strategies.

– Secure conditional access.

– Design a strategy for role assignment and delegation.

– Define Identity governance for access reviews and entitlement management.

– Design a security strategy for privileged role access to infrastructure.

– Design a security strategy for privileged access.

Learn how to evaluate a regulatory compliance strategy.

Lessons

– Introduction

– Interpret compliance requirements and their technical capabilities

– Evaluate infrastructure compliance by using Microsoft Defender for Cloud

– Interpret compliance scores and recommend actions to resolve issues or improve security

– Design and validate implementation of Azure Policy

– Design for data residency Requirements

– Translate privacy requirements into requirements for security solutions

After completing this module, students will be able to:

– Interpret compliance requirements and their technical capabilities

– Evaluate infrastructure compliance by using Microsoft Defender for Cloud

– Interpret compliance scores and recommend actions to resolve issues or improve security

– Design and validate implementation of Azure Policy

– Design for data residency requirements

– Translate privacy requirements into requirements for security solutions

Learn how to evaluate security posture and recommend technical strategies to manage risk.

Lessons

– Introduction

– Evaluate security postures by using benchmarks

– Evaluate security postures by using Microsoft Defender for Cloud

– Evaluate security postures by using Secure Scores

– Evaluate security hygiene of Cloud Workloads

– Design security for an Azure Landing Zone

– Interpret technical threat intelligence and recommend risk mitigations

– Recommend security capabilities or controls to mitigate identified risks

After completing this module, students will be able to:

– Evaluate security postures by using benchmarks

– Evaluate security postures by using Microsoft Defender for Cloud

– Evaluate security postures by using Secure Scores

– Evaluate security hygiene of Cloud Workloads

– Design security for an Azure Landing Zone

– Interpret technical threat intelligence and recommend risk mitigations

– Recommend security capabilities or controls to mitigate identified risks

Learn about architecture best practices and how they are changing with the Cloud.

Lessons

– Introduction

– Plan and implement a security strategy across teams

– Establish a strategy and process for proactive and continuous evolution of a security strategy

– Understand network protocols and best practices for network segmentation and traffic filtering

After completing this module, students will be able to:

– Describe best practices for network segmentation and traffic filtering.

– Plan and implement a security strategy across teams.

– Establish a strategy and process for proactive and continuous evaluation of security strategy.

Learn how to design a strategy for securing server and client endpoints.

Lessons

– Introduction

– Specify security baselines for server and client endpoints

– Specify security requirements for servers

– Specify security requirements for mobile devices and clients

– Specify requirements for securing Active Directory Domain Services

– Design a strategy to manage secrets, keys, and certificates

– Design a strategy for secure remote access

– Understand security operations frameworks, processes, and procedures

– Understand deep forensics procedures by resource type

After completing this module, students will be able to:

– Specify security baselines for server and client endpoints

– Specify security requirements for servers

– Specify security requirements for mobile devices and clients

– Specify requirements for securing Active Directory Domain Services

– Design a strategy to manage secrets, keys, and certificates

– Design a strategy for secure remote access

– Understand security operations frameworks, processes, and procedures

– Understand deep forensics procedures by resource type

Learn how to design a strategy for securing PaaS, IaaS, and SaaS services.

Lessons

– Introduction

– Specify security baselines for PaaS services

– Specify security baselines for IaaS services

– Specify security baselines for SaaS services

– Specify security requirements for IoT workloads

– Specify security requirements for data workloads

– Specify security requirements for web workloads

– Specify security requirements for storage workloads

– Specify security requirements for containers

– Specify security requirements for container orchestration

After completing this module, students will be able to:

– Specify security baselines for PaaS, SaaS and IaaS services

– Specify security requirements for IoT, data, storage, and web workloads

– Specify security requirements for containers and container orchestration

Learn how to specify security requirements for applications.

Lessons

– Introduction

– Understand application threat modeling

– Specify priorities for mitigating threats to applications

– Specify a security standard for onboarding a new application

– Specify a security strategy for applications and APIs

After completing this module, students will be able to:

– Specify priorities for mitigating threats to applications

– Specify a security standard for onboarding a new application

– Specify a security strategy for applications and APIs

Learn how to design a strategy for securing data.

Lessons

– Introduction

– Prioritize mitigating threats to data

– Design a strategy to identify and protect sensitive data

– Specify an encryption standard for data at rest and in motion

After completing this module, students will be able to:

– Prioritize mitigating threats to data

– Design a strategy to identify and protect sensitive data

– Specify an encryption standard for data at rest and in motion