SC-100: Microsoft Cybersecurity Architect

Overview

The SC-100 course includes an in-depth exploration of Zero Trust principles, security governance, and risk management, along with the integration of Microsoft’s security ecosystem, including Microsoft Defender for Cloud, Entra ID, Microsoft Sentinel, and Microsoft Purview. Additionally, the course emphasizes making real-world architectural decisions that align security initiatives with overarching business objectives.

This comprehensive course is designed to provide you with the knowledge and practical skills necessary to become a Microsoft Certified Cybersecurity Architect Expert by successfully passing the exam. Throughout the course, you will learn how to design and evaluate cybersecurity strategies across key areas such as identity, access, data, applications, and infrastructure.

COURSE INSTRUCTOR

Kieran Tross, Microsoft, Okta

COURSE DIFFICULTY

Advanced

COURSE DURATION

12h 15m

Skills Learned

After completing this online training course, students will be able to:

Design and implement secure cloud and hybrid infrastructure solutions
Apply Zero Trust principles to identity, access, and network security
Integrate and manage Microsoft security tools
Manage identity, access, and entitlement lifecycles
Deploy and configure security monitoring and analytics
Align security architecture with compliance standards and business objectives
Secure applications and data across Microsoft 365 and Azure environments
Implement data protection, encryption, and governance strategies
Apply best practices for organizational cybersecurity and risk management

Security Engineer
Security Operations Analyst
Solution Architect

Students should have experience implementing or administering solutions in the following areas: identity and access, platform protection, security operations, data and AI security, application security, and hybrid and multicloud infrastructures.

01. Designing Security Solutions for Infrastructure

Introduction to SC-100
What is Microsoft Defender for Cloud
Walkthrough of Microsoft Defender for Cloud
What is the Azure Security Benchmark
What Are Azure Management Groups
How to Create an Azure Management Group
What is Regulatory Compliance in Defender for Cloud
How to Assign Compliance Standards in Defender for Cloud
Email Notification in Defender for Cloud
What is Defender for Cloud Governance Rules
How to Set Up Defender for Cloud Governance Rules
Defender for Cloud Workflow Automation
How to Set Up Defender for Cloud Workflow Automation
What Are Adaptive Application Controls
Microsoft Secure Score
Posture Management Process
Integration with Third-Party Cloud Providers
Securing Endpoints and Servers

02. Detection, Identity Basics & Zero-Trust Roles

Detection & Response (XDR, SIEM)
What is Microsoft Entra ID
Core Identity Types in Microsoft Entra ID
Microsoft Entra Roles in a Zero Trust Architecture
Microsoft Entra ID vs. On-Premises Active Directory
Microsoft Entra Identity Protection
Role-Based Access Control (RBAC)
What is B2B Collaboration in Microsoft Entra ID
Managing Guest Access and Policies in Microsoft Entra ID
Looking at CIS Benchmarks
Cross-Tenant Access Settings in Microsoft Entra
Lifecycle Management Provisioning and Deprovisioning

03. Entitlement & Access Lifecycle Management

Entitlement Management & Access Reviews in Microsoft Entra
Walkthrough of Access Reviews (Microsoft Entra)
Access Packages Grouping Apps, Groups, and Resources
Request Workflows and Access Expiration
MyAccess Portal for End-User Self-Service
Microsoft Entra Workload Identities
Managed Identities (System-Assigned vs. User-Assigned)
Protect and Govern Service Principals & Managed Identities
Microsoft Log Analytics Workspace
How to Create a Log Analytics Workspace
Managing Access to Your Log Analytics Workspace

04. Sentinel Deployment & Automation Foundations

Microsoft Sentinel
How to Set Up Microsoft Sentinel
Best Practices for Deploying Microsoft Sentinel
Automation in Incident Response
Microsoft Sentinel Blades Explained
What Are Sentinel Playbooks
Assign Microsoft Sentinel RBAC
Microsoft Sentinel Data Connectors
Microsoft Sentinel Azure Activity
Microsoft Sentinel Analytics Rules
Create Automation Rule in Microsoft Sentinel
Microsoft Sentinel Workbooks

05. Cloud-Native Security Integrations & Network Controls

Using Microsoft Defender for Cloud with Sentinel
Integrate Microsoft Sentinel with Defender for Cloud
What is Azure Traffic Manager
What Are Application Security Groups
Threat Hunting & Incident Handling
Designing Identity Solutions for Cloud & Hybrid Environments
Design Conditional Access Policies
Conditional Access and Zero Trust
Old Way of Using Microsoft Entra Identity Protection
Review Conditional Access Policy Templates
Set Up a Conditional Access Policy from Scratch
When to Apply Policy Templates

06. Advanced Conditional Access & Privileged Identity Management

How to Structure Policy Tiers for Zero Trust Enforcement
Applying Authentication Context for Granular Control
Configure Authentication Strength (MFA, FIDO2)
Secure B2B Access with Conditional Access
What is Privileged Identity Management (PIM)
How to Deploy Microsoft Entra Privileged Identity Management (PIM)
What Are Role-Assignable Groups
What Are PIM Role Settings
How to Configure PIM Role Settings
How to Assign Roles in PIM
How to View Audit History in Microsoft Entra Privileged Identity Management (PIM)
Review Conditional Access Policies with PIM

07. Designing Solutions Aligned with Compliance and Best Practices

Resiliency and Risk Management
Regulatory Compliance and Standards
Overview of Microsoft Purview
How to Create Azure Management Groups and RBAC
What is Azure Policy
Zero Trust and Azure Policies
How to Deploy an Azure Policy
How to Create a Custom Azure Policy
How to Deploy Azure Policy Initiatives
Review Azure Policy Compliant Resources
Cybersecurity Reference Architectures & Frameworks
Zero Trust Conditional Access Policy

08. Securing Applications

Securing Applications in the Cloud
What is Microsoft 365 Admin Center
Securing Microsoft 365 Environments
Microsoft Cloud App Security
Microsoft Copilot for Microsoft 365 Services
Anti-Phishing Policies in Microsoft 365 Defender
Walkthrough Microsoft 365 Admin Center

09. Data Protection & Encryption

Introduction to Organizational Data Protection
Data Encryption Concepts and Implementation
Key Management with Azure Key Vault
What is Azure Storage Encryption
How to Create a Storage Account
How to Enable Storage Account Authorization Through Entra
Azure Storage Account – Access Keys
Azure Storage Account – Shared Access Signature
How to Manage Disk Encryption
What Are Azure SQL Databases
How to Create an Azure SQL Database
Setup Microsoft Entra Authentication
How to Setup Auditing for Azure SQL Database
Using Azure Policies with Azure SQL Database

10. Data Governance & Classification

Microsoft Purview – Data Discovery, Classification, Protection, and Monitoring
Purview Information Protection
Data Discovery & Classification with Microsoft Purview
Using Microsoft Purview for Discovery & Classification
Securing Data with Microsoft Purview & Sentinel
Best Practices for Organizational Data Security

SKILLS LEARNED

Skills Learned

After completing this online training course, students will be able to:

Design and implement secure cloud and hybrid infrastructure solutions
Apply Zero Trust principles to identity, access, and network security
Integrate and manage Microsoft security tools
Manage identity, access, and entitlement lifecycles
Deploy and configure security monitoring and analytics
Align security architecture with compliance standards and business objectives
Secure applications and data across Microsoft 365 and Azure environments
Implement data protection, encryption, and governance strategies
Apply best practices for organizational cybersecurity and risk management

WHO SHOULD ATTEND

Security Engineer
Security Operations Analyst
Solution Architect

PREREQUISITES

COURSE OUTLINE

01. Designing Security Solutions for Infrastructure

Introduction to SC-100
What is Microsoft Defender for Cloud
Walkthrough of Microsoft Defender for Cloud
What is the Azure Security Benchmark
What Are Azure Management Groups
How to Create an Azure Management Group
What is Regulatory Compliance in Defender for Cloud
How to Assign Compliance Standards in Defender for Cloud
Email Notification in Defender for Cloud
What is Defender for Cloud Governance Rules
How to Set Up Defender for Cloud Governance Rules
Defender for Cloud Workflow Automation
How to Set Up Defender for Cloud Workflow Automation
What Are Adaptive Application Controls
Microsoft Secure Score
Posture Management Process
Integration with Third-Party Cloud Providers
Securing Endpoints and Servers

02. Detection, Identity Basics & Zero-Trust Roles

Detection & Response (XDR, SIEM)
What is Microsoft Entra ID
Core Identity Types in Microsoft Entra ID
Microsoft Entra Roles in a Zero Trust Architecture
Microsoft Entra ID vs. On-Premises Active Directory
Microsoft Entra Identity Protection
Role-Based Access Control (RBAC)
What is B2B Collaboration in Microsoft Entra ID
Managing Guest Access and Policies in Microsoft Entra ID
Looking at CIS Benchmarks
Cross-Tenant Access Settings in Microsoft Entra
Lifecycle Management Provisioning and Deprovisioning

03. Entitlement & Access Lifecycle Management

Entitlement Management & Access Reviews in Microsoft Entra
Walkthrough of Access Reviews (Microsoft Entra)
Access Packages Grouping Apps, Groups, and Resources
Request Workflows and Access Expiration
MyAccess Portal for End-User Self-Service
Microsoft Entra Workload Identities
Managed Identities (System-Assigned vs. User-Assigned)
Protect and Govern Service Principals & Managed Identities
Microsoft Log Analytics Workspace
How to Create a Log Analytics Workspace
Managing Access to Your Log Analytics Workspace

04. Sentinel Deployment & Automation Foundations

Microsoft Sentinel
How to Set Up Microsoft Sentinel
Best Practices for Deploying Microsoft Sentinel
Automation in Incident Response
Microsoft Sentinel Blades Explained
What Are Sentinel Playbooks
Assign Microsoft Sentinel RBAC
Microsoft Sentinel Data Connectors
Microsoft Sentinel Azure Activity
Microsoft Sentinel Analytics Rules
Create Automation Rule in Microsoft Sentinel
Microsoft Sentinel Workbooks

05. Cloud-Native Security Integrations & Network Controls

Using Microsoft Defender for Cloud with Sentinel
Integrate Microsoft Sentinel with Defender for Cloud
What is Azure Traffic Manager
What Are Application Security Groups
Threat Hunting & Incident Handling
Designing Identity Solutions for Cloud & Hybrid Environments
Design Conditional Access Policies
Conditional Access and Zero Trust
Old Way of Using Microsoft Entra Identity Protection
Review Conditional Access Policy Templates
Set Up a Conditional Access Policy from Scratch
When to Apply Policy Templates

06. Advanced Conditional Access & Privileged Identity Management

How to Structure Policy Tiers for Zero Trust Enforcement
Applying Authentication Context for Granular Control
Configure Authentication Strength (MFA, FIDO2)
Secure B2B Access with Conditional Access
What is Privileged Identity Management (PIM)
How to Deploy Microsoft Entra Privileged Identity Management (PIM)
What Are Role-Assignable Groups
What Are PIM Role Settings
How to Configure PIM Role Settings
How to Assign Roles in PIM
How to View Audit History in Microsoft Entra Privileged Identity Management (PIM)
Review Conditional Access Policies with PIM

07. Designing Solutions Aligned with Compliance and Best Practices

Resiliency and Risk Management
Regulatory Compliance and Standards
Overview of Microsoft Purview
How to Create Azure Management Groups and RBAC
What is Azure Policy
Zero Trust and Azure Policies
How to Deploy an Azure Policy
How to Create a Custom Azure Policy
How to Deploy Azure Policy Initiatives
Review Azure Policy Compliant Resources
Cybersecurity Reference Architectures & Frameworks
Zero Trust Conditional Access Policy

08. Securing Applications

Securing Applications in the Cloud
What is Microsoft 365 Admin Center
Securing Microsoft 365 Environments
Microsoft Cloud App Security
Microsoft Copilot for Microsoft 365 Services
Anti-Phishing Policies in Microsoft 365 Defender
Walkthrough Microsoft 365 Admin Center

09. Data Protection & Encryption

Introduction to Organizational Data Protection
Data Encryption Concepts and Implementation
Key Management with Azure Key Vault
What is Azure Storage Encryption
How to Create a Storage Account
How to Enable Storage Account Authorization Through Entra
Azure Storage Account – Access Keys
Azure Storage Account – Shared Access Signature
How to Manage Disk Encryption
What Are Azure SQL Databases
How to Create an Azure SQL Database
Setup Microsoft Entra Authentication
How to Setup Auditing for Azure SQL Database
Using Azure Policies with Azure SQL Database

10. Data Governance & Classification

Microsoft Purview – Data Discovery, Classification, Protection, and Monitoring
Purview Information Protection
Data Discovery & Classification with Microsoft Purview
Using Microsoft Purview for Discovery & Classification
Securing Data with Microsoft Purview & Sentinel
Best Practices for Organizational Data Security

SC-100: Microsoft Cybersecurity Architect

Overview

Skills Learned

Design and implement secure cloud and hybrid infrastructure solutions

Apply Zero Trust principles to identity, access, and network security

Integrate and manage Microsoft security tools

Manage identity, access, and entitlement lifecycles

Deploy and configure security monitoring and analytics

Align security architecture with compliance standards and business objectives

Secure applications and data across Microsoft 365 and Azure environments

Implement data protection, encryption, and governance strategies

Apply best practices for organizational cybersecurity and risk management

Skills Learned

Design and implement secure cloud and hybrid infrastructure solutions

Apply Zero Trust principles to identity, access, and network security

Integrate and manage Microsoft security tools

Manage identity, access, and entitlement lifecycles

Deploy and configure security monitoring and analytics

Align security architecture with compliance standards and business objectives

Secure applications and data across Microsoft 365 and Azure environments

Implement data protection, encryption, and governance strategies

Apply best practices for organizational cybersecurity and risk management

Say Hi to Mike!