SC-900 Certification: Microsoft Security, Compliance, and Identity Fundamentals

The SC-900 certification is designed for professionals and individuals aiming to build a career in cybersecurity and compliance. Created by Microsoft, this exam covers essential security, compliance, and identity concepts, focusing on Microsoft’s cloud-based security services.

Course Overview: The SC-900 course is structured into four main sections, each featuring multiple modules to ensure a thorough understanding of key concepts:

1. Security, Compliance, and Identity Fundamentals

Module 1: Security Concepts and Methodologies

• Explore the Zero Trust model, focusing on principles like verify explicitly, least privilege access, and assume breach.

• Understand security pillars including identity, devices, applications, data, and networks.

• Learn about the shared responsibility model, crucial for organizations moving to the cloud, and the principles of confidentiality, integrity, and availability.

Module 2: Microsoft Security and Compliance Principles

• Study Microsoft’s six privacy principles and their impact on security strategies.

• Navigate the Service Trust Portal to access compliance and regulatory documentation for Azure.

2. Microsoft Identity and Access Management Solutions

Module 1: Identity Principles and Concepts

• Delve into identity basics such as identity as a security perimeter, authentication, authorization, and the role of Active Directory.

• Understand federated services and their role in modern identity management.

Module 2: Azure AD Services and Identity Types

• Learn the advantages of a cloud-based identity provider, including single sign-on (SSO).

• Explore Azure AD’s pricing models and support for various identity types, including external users.

Module 3: Azure AD Authentication Capabilities

• Understand multi-factor authentication (MFA) and how it enhances security.

• Explore password protection and management features within Azure AD.

Module 4: Azure AD Access Management

• Learn about Conditional Access and how it secures organizational assets.

• Study Azure AD roles and their use in managing access to resources.

Module 5: Identity Protection and Governance in Azure AD

• Explore Azure AD’s identity protection and governance features, including risk-based policies.

3. Microsoft Security Solutions

Module 1: Basic Security Capabilities in Azure

• Discover services like network security groups (NSGs), Azure Firewall, and Azure DDoS Protection.

• Learn about encryption techniques for data protection.

Module 2: Security Management with Azure Security Center

• Understand how Azure Security Center provides a unified security management system.

• Explore Azure secure score and Azure Defender for monitoring security posture and compliance readiness.

Module 3: Security with Azure Sentinel

• Study Azure Sentinel and its role in SIEM (Security Information and Event Management).

• Learn about threat detection, proactive hunting, and response capabilities.

Module 4: Microsoft 365 Defender for Threat Protection

• Explore how Microsoft Defender protects against threats across identities, endpoints, Office 365, and cloud apps.

Module 5: Security Management in Microsoft 365

• Dive into the Microsoft 365 security center, Secure Score, and security reports.

• Learn about incident management capabilities in Microsoft 365.

Module 6: Endpoint Security with Microsoft Intune

• Understand how Microsoft Intune manages and secures endpoints through Microsoft Endpoint Manager.

4. Microsoft Compliance Solutions

Module 1: Compliance Management in Microsoft 365

• Learn about tools like the Microsoft 365 compliance center and Compliance Manager.

• Understand how these tools simplify compliance processes for organizations.

Module 2: Information Protection and Governance

• Study features like data classification, records management, and data loss prevention (DLP).

Module 3: Insider Risk Management

• Explore insider risk management, communication compliance, and privileged access management (PAM).

Module 4: E-Discovery in Microsoft 365

• Understand the purpose of eDiscovery, its core workflows, and advanced eDiscovery capabilities.

Module 5: Audit Capabilities in Microsoft 365

• Learn about core auditing and the benefits of Advanced Auditing in Microsoft 365.

Module 6: Resource Governance in Azure

• Explore Azure’s resource governance capabilities, including the Cloud Adoption Framework.