SC-900 Microsoft Security, Compliance, and Identity Fundamentals

Target group

The audience for this course is looking to familiarize themselves with the fundamentals of security, compliance, and identity (SCI) across cloud-based and related Microsoft services. The content for this course aligns to the SC-900 exam objective domain. Candidates should be familiar with Microsoft Azure and Microsoft 365 and understand how Microsoft security, compliance, and identity solutions can span across these solution areas to provide a holistic and end-to-end solution.

Course structure

Module 1: Describe the concepts of security, compliance, and identity.

Learn about core concepts that are foundational to security, compliance, and identity solutions, including shared responsibility, Zero Trust, data residency, the role of identity providers, and more.

Lessons

• Describe security and compliance concepts
• Describe identity concepts

After completing this module, students will be able to:

• Describe security and compliance concepts.
• Describe identity concepts.

Module 2: Describe the capabilities of Microsoft identity and access management solutions

Azure Active Directory is the tool for identity and access management in the Microsoft Cloud. Learn about Azure AD services and identity principals, secure authentication, access management capabilities, as well as identity protection and governance.

Lessons

• Describe the basic services and identity types of Azure AD
• Describe the authentication capabilities of Azure AD
• Describe the access management capabilities of Azure AD
• Describe the identity protection and governance capabilities of Azure AD

Lab : Explore Azure Active Directory

Lab : Explore Azure AD Authentication with self-service password reset

Lab : Explore access management in Azure AD with Conditional Access

Lab : Explore identity governance in Azure AD with Privileged Identity Management

After completing this module, students will be able to:

• Describe the basic services and identity types of Azure AD.
• Describe the authentication capabilities of Azure AD.
• Describe the access management capabilities of Azure AD.
• Describe the identity protection and governance capabilities of Azure AD.

Module 3: Describe the capabilities of Microsoft security solutions

Learn about Microsoft’s security solutions. Topics covered include network and platform capabilities of Azure, Azure security management with Microsoft Defender for Cloud, and Microsoft Sentinel. You’ll learn about threat protection with Microsoft 365 Defender.

Lessons

• Describe the basic security capabilities in Azure
• Describe the security management capabilities of Azure
• Describe the security capabilities of Microsoft Sentinel
• Describe the threat protection capabilities of Microsoft 365 Defender

Lab : Explore Microsoft Defender for Cloud Apps

Lab : Explore Microsoft Sentinel

Lab : Explore Microsoft Defender for Cloud

Lab : Explore Azure Network Security Groups (NSGs)

Lab : Explore the Microsoft 365 Defender portal

After completing this module, students will be able to:

• Describe the basic security capabilities in Azure.
• Describe the security management capabilities of Azure.
• Describe the security capabilities of Microsoft Sentinel.
• Describe the threat protection capabilities of Microsoft 365 Defender.

Module 4: Describe the capabilities of Microsoft compliance solutions

Learn about Microsoft’s Service Trust Portal and privacy at Microsoft. You’ll learn about Microsoft Purview, a comprehensive set of solutions that help you govern, protect, and manage your entire data estate. You’ll also learn about Azure resource governance capabilities.

Lessons

• Describe the Service Trust Portal and privacy at Microsoft
• Describe the compliance management capabilities of Microsoft Purview
• Describe information protection and data lifecycle management in Microsoft Purview
• Describe the insider risk capabilities in Microsoft Purview
• Describe the eDiscovery and audit capabilities of Microsoft Purview
• Describe the resource governance capabilities in Azure

Lab : Explore the Core eDiscovery workflow

Lab : Explore Azure Policy

Lab : Explore the Service Trust Portal

Lab : Explore the Microsoft Purview compliance portal & Compliance Manager

Lab : Explore sensitivity labels in Microsoft Purview

Lab : Explore insider risk management in Microsoft Purview

After completing this module, students will be able to:

• Describe the Service Trust Portal and privacy at Microsoft.
• Describe the compliance management capabilities of Microsoft Purview.
• Describe information protection and data lifecycle management in Microsoft Purview.
• Describe the insider risk capabilities in Microsoft Purview.
• Describe the eDiscovery and audit capabilities of Microsoft Purview.
• Describe the resource governance capabilities in Azure