Welcome to ISASS
SC-900: Microsoft Security, Compliance, and Identity Fundamentals

The audience of this course seeks to become familiar with the fundamentals of security, compliance, and identity (SCI) in cloud-based environments and related Microsoft services. The content of this course aligns with the mastery of the SC-900 exam objective. This certification is intended for those looking to become familiar with the fundamentals of security, compliance, and identity (SCI) through cloud-based and Microsoft-related services.

Program

  • Description of the shared responsibility model
  • Understanding Defense in Depth
  • Understanding the Zero Trust Model
  • Description of encryption and hash code
  • Description of compliance concepts
  • Knowledge Check
  • Definition of authentication and authorization
  • Defining identity as the primary security perimeter
  • Understanding the Identity Provider Role
  • Understanding the concept of directory services and Active Directory
  • Description of the federation concept
  • Knowledge Check
  • Understanding Azure Active Directory
  • Understanding the available Azure AD editions
  • Understand Azure AD identity types
  • Understanding Types of External Identities
  • Understanding the Hybrid Identity Concept
  • Knowledge Check
  • Describe Azure AD authentication methods.
  • Describe multi-factor authentication (MFA) in Azure AD
  • Understanding self-service password reset (SSPR) in Azure AD
  • Understand Azure AD password protection and management capabilities
  • Knowledge Check
  • Describe identity governance in Azure AD
  • Understanding what rights management and access reviews are
  • Understanding Privileged Identity Management Capabilities
  • Understanding Azure AD Identity Protection
  • Knowledge Check
  • Understanding Azure DDoS protection
  • Understanding Azure Firewall
  • Understanding Web Application Firewall
  • Understanding network segmentation in Azure
  • Understanding Azure network security groups
  • Understanding JIT and Azure Bastion access
  • Understanding the ways Azure encrypts data
  • Knowledge Check
  • Defining SIEM and SOAR Concepts
  • Understanding how Microsoft Sentinel provides built-in threat management
  • Description of Sentinel costs
  • Knowledge Check
  • Describe Microsoft 365 Defender services
  • Describe Microsoft Defender for Office 365
  • Describe Microsoft Defender for Endpoint
  • Understanding Microsoft Defender for Cloud Apps
  • Describe Microsoft Defender for Identity
  • Understand the Microsoft 365 Defender portal
  • Knowledge Check
  • Understanding Compliance Manager
  • Understanding the Use and Benefits of Compliance Scoring
  • Knowledge Check
  • Data Knowledge, Protection, and Governance
  • Understanding the Compliance Portal Data Classification Capabilities
  • Understanding sensitivity policies and labels
  • Data Loss Prevention Overview
  • Understanding retention policies and labels
  • Understanding Log Management
  • Knowledge Check
  • Understanding Insider Risk Management
  • Understanding Communications Compliance
  • Description of information barriers
  • Knowledge Check
  • Understanding Microsoft Purview eDiscovery Solutions
  • Understanding Microsoft Purview Auditing Solutions
  • Knowledge Check
  • Understanding Azure Policy
  • Understanding how to use Azure Blueprints
  • Describe the capabilities in the Microsoft Purview governance portal.
  • Knowledge Check