Exam Ref SC-900 Microsoft Security, Compliance, and Identity Fundamentals

✍ Scribed by Yuri Diogenes, Nicholas DiCola, Kevin McKinnerney, Mark Morowczynski

• Publisher: Microsoft Press
• Year: 2021
• Tongue: English
• Leaves: 193
• Edition: 2
• Category: Library

✦ Synopsis

Prepare for Microsoft Exam SC-900 and help demonstrate your real-world knowledge of the fundamentals of security, compliance, and identity (SCI) across cloud-based and related Microsoft services. Designed for business stakeholders, new and existing IT professionals, functional consultants, and students, this Exam Ref focuses on the critical thinking and decision-making acumen needed for success at the Microsoft Certified: Security, Compliance, and Identity Fundamentals level.

Focus on the expertise measured by these objectives:

• Describe the concepts of security, compliance, and identity

• Describe the capabilities of Microsoft identity and access management solutions

• Describe the capabilities of Microsoft security solutions

• Describe the capabilities of Microsoft compliance solutions

This Microsoft Exam Ref:

• Organizes its coverage by exam objectives

• Features strategic, what-if scenarios to challenge you

• Assumes you are a business user, stakeholder, consultant, professional, or student who wants to create holistic, end-to-end solutions with Microsoft security, compliance, and identity technologies

About the Exam

Exam SC-900 focuses on knowledge needed to describe: security and compliance concepts and methods; identity concepts; Azure AD identity services/types, authentication, access management, identity protection, and governance; Azure, Azure Sentinel, and Microsoft 365 security management; Microsoft 365 Defender threat protection and Intune endpoint security; Microsoft 365 compliance management, information protection, governance, insider risk, eDiscovery, and audit capabilities; and Azure resource governance.

About Microsoft Certification

Passing this exam fulfills your requirements for the Microsoft Certified: Security, Compliance, and Identity Fundamentals certification, helping to demonstrate your understanding of the fundamentals of security, compliance, and identity (SCI) across cloud-based and related Microsoft services. With this certification, you can move on to earn more advanced related Associate-level role-based certifications.

See full details at: microsoft.com/learn

✦ Table of Contents

Cover
Title Page
Copyright Page
Contents
Introduction
Organization of this book
Preparing for the exam
Microsoft certifications
Errata, updates & book support
Stay in touch
Chapter 1 Describe the concepts of security, compliance, and identity
Skill 1.1: Describe security and compliance concepts
Shared responsibility model
Defense in depth
Zero Trust Methodology
Encryption and hashing
Governance, risk, and compliance (GRC)
Skill 1.2: Define identity concepts
Define identity as the primary security perimeter
Authentication
Authorization
Federation and identity providers
Active Directory
Thought experiment
Thought experiment answers
Chapter summary
Chapter 2 Microsoft identity and access management solutions
Skill 2.1: Define the function and identity types of Microsoft Entra ID
Describe what Microsoft Entra is
Describe what Microsoft Entra ID is
Describe what hybrid identity is
Describe Microsoft Entra identities (users, devices, groups, and workload identities)
Skill 2.2: Describe the authentication capabilities of Microsoft Entra ID
Describe the different authentication methods
Describe password protection and management capabilities
Describe multifactor authentication
Describe Windows Hello for Business and passwordless credentials
Skill 2.3: Describe the access management capabilities of Microsoft Entra ID
Describe what conditional access is
Describe uses and benefits of conditional access
Describe Microsoft Entra roles and role-based access control (RBAC)
Skill 2.4: Describe the identity protection and governance capabilities of Microsoft Entra
Describe what identity governance is
Describe what entitlement management and access reviews are
Describe the capabilities of PIM
Describe Microsoft Entra Permissions Management
Describe Microsoft Entra ID Protection
Thought experiment
Thought experiment answers
Chapter summary
Chapter 3 Capabilities of Microsoft security solutions
Skill 3.1: Basic security capabilities in Azure
Azure DDoS protection
Azure Firewall
Web Application Firewall
Network segmentation with Azure virtual networks
Azure network security groups
Azure Bastion
Azure Key Vault
Skill 3.2: Security management capabilities in Azure
Cloud security posture management
Defender for Cloud
Enhanced security features of Microsoft Defender for Cloud
Security baselines for Azure
Skill 3.3: Security capabilities in Microsoft Sentinel
What is Security Information and Event Management (SIEM)?
What is security orchestration, automation, and response?
Microsoft Sentinel
Skill 3.4: Threat protection with Microsoft 365 Defender
Microsoft 365 Defender services
Microsoft Defender for Office 365
Microsoft Defender for Endpoint
Microsoft Defender for Cloud Apps
Microsoft Defender for Identity
Microsoft Defender Vulnerability Management
Microsoft Defender Threat Intelligence
Microsoft 365 Defender portal
Thought experiment
Thought experiment answers
Chapter summary
Chapter 4 Describe the capabilities of Microsoft compliance solutions
Skill 4.1: Service Trust Portal and privacy
Microsoft’s Service Trust Portal
Microsoft’s privacy principles
Microsoft Priva
Skill 4.2: Common compliance needs
Microsoft Purview compliance portal
Microsoft Purview Compliance Manager
Compliance Score
Skill 4.3: Information protection, data lifecycle management, and data governance
Data classification capabilities
Content Explorer and Activity Explorer
Sensitivity labels
Data loss prevention
Endpoint data loss prevention
Records management
Retention policies and labels
Microsoft Purview unified data governance
Skill 4.4: Insider risk, eDiscovery, and auditing
Insider Risk Management
eDiscovery
Content search
eDiscovery (Standard) Workflow
eDiscovery (Premium) workflow
Auditing
Microsoft Purview Audit capabilities
Audit (Premium)
Access to crucial events for investigations
Thought experiment
Thought experiment answers
Chapter summary
Chapter 5 SC-900 Microsoft Security, Compliance, and Identity Fundamentals exam updates
The purpose of this chapter
About possible exam updates
Impact on you and your study plan
News and commentary about the exam objective updates
Updated technical content
Objective mapping
Index
A
B
C
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z