This comprehensive course is designed to provide you with the knowledge and practical skills necessary to become a Microsoft Certified Cybersecurity Architect Expert by successfully passing the exam. Throughout the course, you will learn how to design and evaluate cybersecurity strategies across key areas such as identity, access, data, applications, and infrastructure.
Overview
Curriculum
- 10 Sections
- 116 Lessons
- 12 Hours
Expand all sectionsCollapse all sections
- 01. Designing Security Solutions for Infrastructure18
- 1.1Introduction to SC-100
- 1.2How to Set Up Defender for Cloud Governance Rules
- 1.3Defender for Cloud Workflow Automation
- 1.4How to Set Up Defender for Cloud Workflow Automation
- 1.5What is Defender for Cloud Governance Rules
- 1.6Email Notification in Defender for Cloud
- 1.7How to Assign Compliance Standards in Defender for Cloud
- 1.8How to Create an Azure Management Group
- 1.9How to Create an Azure Management Group What is Regulatory Compliance in Defender for Cloud
- 1.10What Are Azure Management Groups
- 1.11What is the Azure Security Benchmark
- 1.12Walkthrough of Microsoft Defender for Cloud
- 1.13What is Microsoft Defender for Cloud
- 1.14Securing Endpoints and Servers
- 1.15Integration with Third-Party Cloud Providers
- 1.16Posture Management Process
- 1.17What Are Adaptive Application Controls
- 1.18Microsoft Secure Score
- 02. Detection, Identity Basics & Zero-Trust Roles12
- 2.1Microsoft Entra Identity Protection
- 2.2Looking at CIS Benchmarks
- 2.3What is B2B Collaboration in Microsoft Entra ID
- 2.4Managing Guest Access and Policies in Microsoft Entra ID
- 2.5Lifecycle Management Provisioning and Deprovisioning
- 2.6Cross-Tenant Access Settings in Microsoft Entra
- 2.7Role-Based Access Control (RBAC)
- 2.8Microsoft Entra ID vs. On-Premises Active Directory
- 2.9Microsoft Entra Roles in a Zero Trust Architecture
- 2.10Core Identity Types in Microsoft Entra ID
- 2.11What is Microsoft Entra ID
- 2.12Detection & Response (XDR, SIEM)
- 03. Entitlement & Access Lifecycle Management11
- 3.1Managing Access to Your Log Analytics Workspace
- 3.2Microsoft Log Analytics Workspace
- 3.3How to Create a Log Analytics Workspace
- 3.4Protect and Govern Service Principals & Managed Identities
- 3.5Managed Identities (System-Assigned vs. User-Assigned)
- 3.6Walkthrough of Access Reviews (Microsoft Entra)
- 3.7Microsoft Entra Workload Identities
- 3.8Access Packages Grouping Apps, Groups, and Resources
- 3.9Request Workflows and Access Expiration
- 3.10MyAccess Portal for End-User Self-Service
- 3.11Entitlement Management & Access Reviews in Microsoft Entra
- 04. Sentinel Deployment & Automation Foundations12
- 4.1Microsoft Sentinel Azure Activity
- 4.2Assign Microsoft Sentinel RBAC
- 4.3Microsoft Sentinel Analytics Rules
- 4.4What Are Sentinel Playbooks
- 4.5Microsoft Sentinel Blades Explained
- 4.6Microsoft Sentinel Data Connectors
- 4.7Create Automation Rule in Microsoft Sentinel
- 4.8Best Practices for Deploying Microsoft Sentinel
- 4.9Automation in Incident Response
- 4.10How to Set Up Microsoft Sentinel
- 4.11Microsoft Sentinel
- 4.12Microsoft Sentinel Workbooks
- 05. Cloud-Native Security Integrations & Network Controls12
- 5.1Review Conditional Access Policy Templates
- 5.2When to Apply Policy Templates
- 5.3Conditional Access and Zero Trust
- 5.4Old Way of Using Microsoft Entra Identity Protection
- 5.5Set Up a Conditional Access Policy from Scratch
- 5.6Design Conditional Access Policies
- 5.7Designing Identity Solutions for Cloud & Hybrid Environments
- 5.8Threat Hunting & Incident Handling
- 5.9What Are Application Security Groups
- 5.10What is Azure Traffic Manager
- 5.11Integrate Microsoft Sentinel with Defender for Cloud
- 5.12Using Microsoft Defender for Cloud with Sentinel
- 06. Advanced Conditional Access & Privileged Identity Management12
- 6.1How to View Audit History in Microsoft Entra Privileged Identity Management (PIM)
- 6.2How to Assign Roles in PIM
- 6.3How to Configure PIM Role Settings
- 6.4What Are PIM Role Settings
- 6.5What is Privileged Identity Management (PIM)
- 6.6Secure B2B Access with Conditional Access
- 6.7What Are Role-Assignable Groups
- 6.8Configure Authentication Strength (MFA, FIDO2)
- 6.9How to Deploy Microsoft Entra Privileged Identity Management (PIM)
- 6.10Applying Authentication Context for Granular Control
- 6.11Review Conditional Access Policies with PIM
- 6.12How to Structure Policy Tiers for Zero Trust Enforcement
- 07. Designing Solutions Aligned with Compliance and Best Practices12
- 7.1Cybersecurity Reference Architectures & Frameworks
- 7.2Zero Trust Conditional Access Policy
- 7.3Review Azure Policy Compliant Resources
- 7.4How to Deploy Azure Policy Initiatives
- 7.5How to Deploy an Azure Policy
- 7.6How to Create a Custom Azure Policy
- 7.7How to Create a Custom Azure Policy
- 7.8How to Deploy an Azure Policy
- 7.9Zero Trust and Azure Policies
- 7.10What is Azure Policy
- 7.11How to Create Azure Management Groups and RBAC
- 7.12Overview of Microsoft Purview
- 08. Securing Applications7
- 09. Data Protection & Encryption14
- 9.1How to Setup Auditing for Azure SQL Database
- 9.2Using Azure Policies with Azure SQL Database
- 9.3Setup Microsoft Entra Authentication
- 9.4How to Create an Azure SQL Database
- 9.5What Are Azure SQL Databases
- 9.6Azure Storage Account – Shared Access Signature
- 9.7How to Enable Storage Account Authorization Through Entra
- 9.8Azure Storage Account – Access Keys
- 9.9How to Manage Disk Encryption
- 9.10How to Create a Storage Account
- 9.11What is Azure Storage Encryption
- 9.12Key Management with Azure Key Vault
- 9.13Data Encryption Concepts and Implementation
- 9.14Introduction to Organizational Data Protection
- 10. Data Governance & Classification6
- 10.1Best Practices for Organizational Data Security
- 10.2Securing Data with Microsoft Purview & Sentinel
- 10.3Data Discovery & Classification with Microsoft Purview
- 10.4Using Microsoft Purview for Discovery & Classification
- 10.5Purview Information Protection
- 10.6Microsoft Purview – Data Discovery, Classification, Protection, and Monitoring
Instructor
