Microsoft Security
SC-100T00 Microsoft Cybersecurity Architect
Think and design like a cybersecurity architect.
4 daysAdvanced19 modulesSC-100T00Microsoft Certified: Cybersecurity Architect Expert
About this course
Think and design like a cybersecurity architect. Over four days you will shape a Zero Trust strategy using the Cloud Adoption Framework, Well-Architected Framework and Microsoft Cybersecurity Reference Architecture, then design solutions for ransomware resilience, compliance, identity and privileged access, security operations, Microsoft 365, applications and data. Three case studies sharpen your judgement as you prepare for the SC-100 exam and the Cybersecurity Architect Expert certification.
Curriculum
19 modules
- Zero Trust initiatives
- Zero Trust technology pillars part 1
- Zero Trust technology pillars part 2
- Define a security strategy
- Cloud Adoption Framework secure methodology
- Design security with Azure Landing Zones
- The Well-Architected Framework security pillar
- Design solutions with best practices for capabilities and controls
- Design solutions with best practices for attack protection
- Common cyberthreats and attack patterns
- Support business resiliency
- Ransomware protection
- Configurations for secure backup and restore
- Security updates
- Case study description
- Case study answers
- Conceptual walkthrough
- Technical walkthrough
- Translate compliance requirements into a security solution
- Address compliance requirements with Microsoft Purview
- Address privacy requirements with Microsoft Priva
- Address security and compliance requirements with Azure policy
- Evaluate infrastructure compliance with Defender for Cloud
- Design cloud, hybrid and multicloud access strategies (including Microsoft Entra ID)
- Design a solution for external identities
- Design modern authentication and authorization strategies
- Align conditional access and Zero Trust
- Specify requirements to secure Active Directory Domain Services (AD DS)
- Design a solution to manage secrets, keys, and certificates
- The enterprise access model
- Design identity governance solutions
- Design a solution to secure tenant administration
- Design a solution for cloud infrastructure entitlement management (CIEM)
- Design a solution for privileged access workstations and bastion services
- Design security operations capabilities in hybrid and multicloud environments
- Design centralized logging and auditing
- Design security information and event management (SIEM) solutions
- Design solutions for detection and response
- Design a solution for security orchestration, automation, and response (SOAR)
- Design security workflows
- Design threat detection coverage
- Case study description
- Case study answers
- Conceptual walkthrough
- Technical walkthrough
- Evaluate security posture for collaboration and productivity workloads
- Design a Microsoft Defender XDR solution
- Design configurations and operational practices for Microsoft 365
- Design and implement standards to secure application development
- Evaluate security posture of existing application portfolios
- Evaluate application threats with threat modeling
- Design security lifecycle strategy for applications
- Secure access for workload identities
- Design a solution for API management and security
- Design a solution for secure access to applications
- Design a solution for data discovery and classification using Microsoft Purview
- Design a solution for data protection
- Design data security for Azure workloads
- Design security for Azure Storage
- Design a security solution with Microsoft Defender for SQL and Microsoft Defender for Storage
- Case study description
- Case study answers
- Conceptual walkthrough
- Technical walkthrough
- Specify security baselines for SaaS, PaaS, and IaaS services
- Specify security requirements for web workloads
- Specify security requirements for containers and container orchestration
- Evaluate security posture by using Microsoft Cloud Security Benchmark
- Design integrated posture management and workload protection
- Evaluate security posture by using Microsoft Defender for Cloud
- Posture evaluation with Microsoft Defender for Cloud secure score
- Design cloud workload protection with Microsoft Defender for Cloud
- Integrate hybrid and multicloud environments with Azure Arc
- Design a solution for external attack surface management
- Specify server security requirements
- Specify requirements for mobile devices and clients
- Specify internet of things (IoT) and embedded device security requirements
- Secure operational technology (OT) and industrial control systems (ICS) with Microsoft Defender for IoT
- Specify security baselines for server and client endpoints
- Design a solution for secure remote access
- Design solutions for network segmentation
- Design solutions for traffic filtering with network security groups
- Design solutions for network posture management
- Design solutions for network monitoring
- Case study description
- Case study answers
- Conceptual walkthrough
- Technical walkthrough
Who it's for
Experienced security engineers, ideally holding an associate-level Microsoft security certification, who are moving into architecture roles.
Before you start
- Highly recommended to have attended and passed one of the associate level certifications in the security, compliance and identity portfolio (such as AZ-500T00 Microsoft Azure Security Technologies , SC-200T00: Microsoft Security Operations Analyst , or SC-300T00: Microsoft Identity and Access Administrator .) Advanced experience and knowledge in identity and access, platform protection, security operations, securing data and securing applications.
- Experience with hybrid and cloud implementations.
Prepares for
Related courses
More in Microsoft Security →FoundationSC-900T00
Microsoft Security, SC-900T00 Introduction to Microsoft Security, Compliance, and Identity, and Identity Fundamentals: SC-900 Exam Prep
Microsoft Security
View course →IntermediateSC-200
SC-200: Defend Against Cyberthreats with Microsoft's Security Operations Platform
Microsoft Security
View course →IntermediateSC-300T00
SC-300T00 Microsoft Identity and Access Administrator
Microsoft Security
View course →IntermediateSC-401
SC-401 Protect sensitive information with Microsoft Purview in the AI era
Microsoft Security
View course →IntermediateSC-5001
SC-5001 Configure SIEM security operations using Microsoft Sentinel
Microsoft Security
View course →IntermediateSC-5002
SC-5002 Secure Azure services and workloads with Microsoft Defender for Cloud regulatory compliance controls
Microsoft Security
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.