https://i124.fastpic.org/big/2024/1005/e3/f2b436ca42a0c9a495214be9c37470e3.jpg
Sc-100 Microsoft Cybersecurity Architect Course With Sims
Published 4/2024
MP4 | Video: h264, 1920x1080 | Audio: AAC, 44.1 KHz
Language: English | Size: 12.17 GB | Duration: 18h 24m
Get prepared for the SC-100 exam with instructor led labs and hands on simulations available 24/7
What you'll learn
Learn the concepts and perform hands on activities needed to pass the SC-100 exam
Gain a tremendous amount of knowledge involving securing Microsoft 365 and Azure Services
Get loads of hands on experience with Microsoft Cybersecurity for Azure and Microsoft 365
Utilize hands on simulations that can be accessed anytime, anywhere!
Requirements
Willingness to put in the time and practice the steps shown in the course
Description
We really hope you'll agree, this training is way more then the average course on Udemy! Have access to the following:Training from an instructor of over 20 years who has trained thousands of people and also a Microsoft Certified TrainerLecture that explains the concepts in an easy to learn method for someone that is just starting out with this materialInstructor led hands on and simulations to practice that can be followed even if you have little to no experienceTOPICS COVERED INCLUDING HANDS ON LECTURE AND PRACTICE TUTORIALS:Design a resiliency strategy for ransomware & other attacks based on MS Security Working with business resiliency goals, identifying and prioritizing threatsMS ransomware best practices, including backup, restore, and privileged accessSecure backup and restore by using Azure BackupSecurity updates using the Azure Update ManagerDesign solutions that align with the MCRA and MCSBConcepts of cybersecurity capabilities and controls using Zero Trust securityConcepts of MS Defender for protecting against insider and external attacksNavigating the Microsoft Defender and Microsoft Purview admin centersUnderstanding insider risk policies as a mitigation solution Implementing insider risk management policies in Microsoft Purview Using the Zero Trust Rapid Modernization Plan (RaMP) as your security strategyDesign solutions that align with the Microsoft CAF and WAF FrameworksSecurity and governance based on Microsoft Cloud Adoption Framework (CAF)Security and governance based on Microsoft Azure Well-Architected FrameworkUsing Azure landing zones for implementing and governing securityThe DevSecOps process modelDesign solutions for security operationsSecurity operations capabilities to support a hybrid or multicloud environment Requirements for centralized logging and auditing Setting audit permissions and enabling support Perform threat hunting by with audit logging Understanding the Kusto Query Language (KQL) for use in threat hunting Detection and response concepts of extended detection and response (XDR) Confirming we understand the concept of Microsoft Sentinel Setting up a Log Analytics workspace and Microsoft Sentinel workspace Confirming we understand the concepts of SIEM and SOAR Visualizing data ingestion for use in Microsoft Sentinel Understanding analytic rules in Microsoft Sentinel to support SIEM and SOAR Workflow for creating security analytic rules for incident response & management Workflow for creating built-in scheduled query rules Workflow for creating near-real-time (NRT) analytics rules Automation with security orchestration automated response (SOAR) Utilizing content gallery hunting queries for threat hunting Threat detection coverage by using MITRE ATT&CK Design solutions for identity and access managementUnderstanding SaaS, PaaS, and IaaS, & how it relates to Azure hybrid/on-premise Use cases with SaaS, PaaS, & IaaS including identity, networking, applications External identities, business-to-business (B2B), & business-to-customer (B2C)Managing business-to-business (B2B) settings within Entra IDUsing Entra ID external identities for a business-to-business (B2B) solutionCreating a tenant for using business-to-customer (B2C) scenariosDecentralized identities with the help of Microsoft Entra Verified IDThreat mitigation with sign-in logs in Microsoft Entra IDUnderstanding Entra Identity Protection for continuous access evaluationUsing Entra Identity Protection for securing authentication and authorizationThreat intelligence integration from Entra Identity Protection into MS DefenderUnderstanding Multi Factor Authentication (MFA)Implementing Muti Factor Authentication in Microsoft Entra IDImplementing Self Service Password Reset (SSPR) in Microsoft Entra IDUnderstanding Conditional Access Policies with a Zero Trust strategyImplementing Conditional Access Policies with a Zero Trust strategyConcepts of threat intelligence integration with Defender for Cloud Design and configure workflow automation in Microsoft Defender for CloudSetting up email notifications within Defender for CloudCreate and manage alert suppression rulesGenerate sample alerts and incidents in Microsoft Defender for CloudRemediate alerts and incidents by using MS Defender for Cloud recommendationsManage security alerts and incidentsAnalyze Microsoft Defender for Cloud threat intelligence reportsConcepts of securing the various types of identities using Defender for IdentityHybrid Active Directory Domain Services (ADDS) connections for secure identitiesCreating an Azure Key Vault for secrets, keys, and certificates Access control to secrets, keys, and certificates with Azure Key Vault Managing secrets, keys, and certificates with Azure Key vault Removing key vault servicesDesign solutions for securing privileged accessAssigning and delegating privileged roles by using the enterprise access modelUnderstanding RBAC for Identity governance & privileged access managementImplementing RBAC to provide privileged access management in Entra ID & AzureCreating a custom RBAC role in Microsoft Entra IDUsing RBAC to provide access to Azure resourcesImplementing RBAC to provide privileged access management in Microsoft 365Understanding Microsoft Entra Privileged Identity Management (PIM)Implementing Microsoft Entra Privileged Identity Management (PIM)Understanding entitlement management as an identity governance solutionCreating catalogs for entitlement managementImplementing entitlement management with Microsoft Entra Permissions ManagementUser access request entitlement management to an access packageIdentity governance with access reviews in Microsoft EntraPrivileged Access Workstation (PAW) and bastion servicesDesign solutions for regulatory complianceDetermining compliance requirements for security solution adaptationSolutions that address compliance requirements by using Microsoft PurviewUtilizing Microsoft Priva for privacy requirementsCreating Privacy Risk Management policies to meet privacy requirementsAzure Policy solutions to address security and compliance requirementsCompliance with Microsoft Defender for CloudDesign solutions for security posture management in hybrid and multicloudSecurity posture with regulatory compliance policies and MCSB Security posture with Microsoft Defender for CloudSecurity posture with Microsoft Secure ScoreEnabling support for Defender for servers within Defender for Cloud Enabling Microsoft Defender for Servers as a cloud workload protection solutionEnabling Microsoft Defender for App Service as a cloud app protection solutionIntegration with hybrid and multicloud environments by using Azure Arc Support for Microsoft Defender for DevOps within Defender for CloudUtilizing Microsoft Defender External Attack Surface Management (Defender EASM) Design solutions for securing server and client endpointsUsing Microsoft Defender for Endpoint for securing multiple platforms and OS' Configuring settings in Microsoft Defender for Endpoint Utilizing Microsoft Intune for mobile devices & client for endpoint protection Managing security requirements on mobile devices & clients endpoints with Intune Using security baselines to secure servers and client endpointsIoT, OT and ICS security discovery using Microsoft Defender for IoTSecure remote access with Microsoft Entra Global Secure AccessSpecify requirements for securing SaaS, PaaS, and IaaS servicesSecurity baselines for SaaS, PaaS, and IaaS servicesSecurity in your IoT workloadsWeb workload management with Azure App Service plans Creating an Azure App Service plan Adding an App Service for web workloads Securing web workloads with Azure App ServicesUnderstanding containers in Azure Creating a container instance in Azure Securing Azure container instancesContainer orchestration with Azure Kubernetes Service (AKS) Scaling container orchestration with Azure Kubernetes Service (AKS) Securing container orchestration with Azure Kubernetes Service (AKS)Design solutions for securing Microsoft 365Posture with Microsoft Secure Score & Microsoft Defender for Cloud secure score Requirements for a Microsoft 365 Defender security solutionSecure configuration & operational practices for Microsoft 365 workloads & dataDesign solutions for securing applicationsSecuring existing application portfolios and business-critical applicationsStandards and practices for securing the application development processConsiderations for API management and security solutionsUnderstanding secure access with Azure Web Application Firewall (WAF) Use cases for implementing the Azure Front Door Setting up an Azure Web Application Firewall (WAF) & Azure Front Door Removing existing resources up to this pointDesign solutions for securing an organization's dataUnderstanding data discovery and classification with Purview sensitivity labels Managing sensitive info types for a classification data governance solution Implementing a data governance & classification solution with sensitivity labelsVisualizing protection solutions with data at rest, data in motion & data in useUnderstanding the concepts of relational databases Setting up an Azure SQL database and connecting with SSMS Configuring Azure SQL firewall settings for client connectionsUtilizing Azure SQL dynamic maskingUtilizing Azure SQL database encryption Understanding the concepts of non-relational data and NoSQL Setting up an Azure Cosmos DB solution in Azure Protection and durability with replication of an Azure Cosmos DB Remove existing database resourcesGrasping the purposes of Azure Synapse Analytics Registering Azure Synapse as a resource provider Creating a SQL DB and server for use with Azure Synapse Analytics Adding an Azure Synapse workspace and Data Lake Storage account Visualizing the concepts of SQL Pool usage with Azure Synapse Analytics Setting up a SQL Pool for usage with Azure Synapse Confirming we understand the concepts of Azure Storage accounts Creating an Azure Storage account as a data storage solutionMitigating threats to data within our Azure Storage account solutionEnabling Defender for Storage within a Azure Storage accountUtilizing Microsoft Defender for SQL as a security solution ConclusionCleaning up resourceGetting a Udemy certificateBONUS Where do I go from here?
Overview
Section 1: Introduction
Lecture 1 Welcome to the SC-100 course!
Lecture 2 Understanding the Microsoft Environment
Lecture 3 Foundations of Active Directory Domains
Lecture 4 Foundations of RAS, DMZ, and Virtualization
Lecture 5 Foundations of the Microsoft Cloud Services
Lecture 6 DONT SKIP: The first thing to know about Microsoft cloud services
Lecture 7 DONT SKIP: Azure AD is now renamed to Entra ID
Lecture 8 Questions for John Christopher
Lecture 9 Order of concepts covered in the course
Lecture 10 Overlap with other certifications
Section 2: Performing hands on activities
Lecture 11 DONT SKIP: Using Assignments/Simulations in the course
Lecture 12 Creating a free Microsoft 365 Account
Lecture 13 Getting your free Azure credit
Section 3: Design a resiliency strategy for ransomware & other attacks based on MS Security
Lecture 14 Working with business resiliency goals, identifying and prioritizing threats
Lecture 15 MS ransomware best practices, including backup, restore, and privileged access
Lecture 16 Secure backup and restore by using Azure Backup
Lecture 17 Security updates using the Azure Update Manager
Section 4: Design solutions that align with the MCRA and MCSB
Lecture 18 Concepts of cybersecurity capabilities and controls using Zero Trust security
Lecture 19 Concepts of MS Defender for protecting against insider and external attacks
Lecture 20 Navigating the Microsoft Defender and Microsoft Purview admin centers
Lecture 21 Understanding insider risk policies as a mitigation solution
Lecture 22 Implementing insider risk management policies in Microsoft Purview
Lecture 23 Using the Zero Trust Rapid Modernization Plan (RaMP) as your security strategy
Section 5: Design solutions that align with the Microsoft CAF and WAF Frameworks
Lecture 24 Security and governance based on Microsoft Cloud Adoption Framework (CAF)
Lecture 25 Security and governance based on Microsoft Azure Well-Architected Framework
Lecture 26 Using Azure landing zones for implementing and governing security
Lecture 27 The DevSecOps process model
Section 6: Design solutions for security operations
Lecture 28 Security operations capabilities to support a hybrid or multicloud environment
Lecture 29 Requirements for centralized logging and auditing
Lecture 30 Setting audit permissions and enabling support
Lecture 31 Perform threat hunting by with audit logging
Lecture 32 Understanding the Kusto Query Language (KQL) for use in threat hunting
Lecture 33 Detection and response concepts of extended detection and response (XDR)
Lecture 34 Confirming we understand the concept of Microsoft Sentinel
Lecture 35 Setting up a Log Analytics workspace and Microsoft Sentinel workspace
Lecture 36 Confirming we understand the concepts of SIEM and SOAR
Lecture 37 Visualizing data ingestion for use in Microsoft Sentinel
Lecture 38 Understanding analytic rules in Microsoft Sentinel to support SIEM and SOAR
Lecture 39 Workflow for creating security analytic rules for incident response & management
Lecture 40 Workflow for creating built-in scheduled query rules
Lecture 41 Workflow for creating near-real-time (NRT) analytics rules
Lecture 42 Automation with security orchestration automated response (SOAR)
Lecture 43 Utilizing content gallery hunting queries for threat hunting
Lecture 44 Threat detection coverage by using MITRE ATT&CK
Section 7: Design solutions for identity and access management
Lecture 45 Understanding SaaS, PaaS, and IaaS, & how it relates to Azure hybrid/on-premise
Lecture 46 Use cases with SaaS, PaaS, & IaaS including identity, networking, applications
Lecture 47 External identities, business-to-business (B2B), & business-to-customer (B2C)
Lecture 48 Managing business-to-business (B2B) settings within Entra ID
Lecture 49 Using Entra ID external identities for a business-to-business (B2B) solution
Lecture 50 Creating a tenant for using business-to-customer (B2C) scenarios
Lecture 51 Decentralized identities with the help of Microsoft Entra Verified ID
Lecture 52 Threat mitigation with sign-in logs in Microsoft Entra ID
Lecture 53 Understanding Entra Identity Protection for continuous access evaluation
Lecture 54 Using Entra Identity Protection for securing authentication and authorization
Lecture 55 Threat intelligence integration from Entra Identity Protection into MS Defender
Lecture 56 Understanding Multi Factor Authentication (MFA)
Lecture 57 Implementing Muti Factor Authentication in Microsoft Entra ID
Lecture 58 Implementing Self Service Password Reset (SSPR) in Microsoft Entra ID
Lecture 59 Understanding Conditional Access Policies with a Zero Trust strategy
Lecture 60 Implementing Conditional Access Policies with a Zero Trust strategy
Lecture 61 Concepts of threat intelligence integration with Defender for Cloud
Lecture 62 Design and configure workflow automation in Microsoft Defender for Cloud
Lecture 63 Setting up email notifications within Defender for Cloud
Lecture 64 Create and manage alert suppression rules
Lecture 65 Generate sample alerts and incidents in Microsoft Defender for Cloud
Lecture 66 Remediate alerts and incidents by using MS Defende