SC-900 Microsoft Security Fundamentals Exam Prep

Explains the zero-trust model and its three pillars—verify explicitly, least-privileged access, assume breach—along with just-in-time and just-enough access, MFA, encryption, and continuous threat monitoring.

Identify common security threats including data breaches, phishing and spear phishing, tech support scams, SQL injection, dictionary and brute-force attacks, and ransomware, with real-world impacts on backups and operations.

Explore encryption and hashing, including symmetric and asymmetric schemes, public and private keys, and hashing for password security with salting and work factors.

Explore governance, risk, and compliance concepts and how policies, risk management, and regulatory obligations guide decision making, with the Microsoft 365 maturity model from level 100 to 500.

Explore how modern authentication uses identity providers and tokens to securely verify users, enabling single sign-on and centralized authorization through role-based access control and least-privilege principles.

Learn about directory services and active directory for on-premises networks, focusing on domain services, domain controllers, and how credentials verify access for users, groups, devices, and resources.

Navigate the Azure portal to manage Microsoft Entra ID tenants, domains, users, groups, apps, and licenses, and learn how to switch tenants and create new ones on paid plans.

Explore the types of identities in Entra ID, including internal users, apps, and guest users. Learn how federation, on-premises Active Directory, and hybrid identities enable single sign-on and synchronized passwords.

Explore Entra ID managed identities, a non-human authentication method for applications. Grant only the precise permissions needed, such as reading a specific blob container, avoiding user credentials.

Entra ID acts as identity as a service, managing users, groups, and Azure resource permissions. It provides a single sign-on experience and supports enterprise apps and custom app registrations.

Enable self-service password reset with Azure Active Directory to let users recover or unlock passwords without help desk support; administrators must enable it and provide alternate contact methods, premium required.

Explore windows hello for business and passwordless authentication with azure ad, using facial recognition or a pin, and multi-device prompts that replace passwords with phone or tap-based verification.

Explore azure ad roles, including built-in and custom roles, to simplify and secure permissions with role-based access control and job-title alignment.

Explore Azure DDoS protection, where basic protection is free and standard protection offers an availability guarantee, cost protection, and custom mitigation policies, plus reports, metrics and alerts.

Protects your network with Azure Firewall at the application or network level using automatic threat intelligence to block known bad IPs. Translates traffic with network address translation to forward ports.

Discover how Azure Bastion provides secure, vpn-like access to Azure virtual machines without exposing RDP or public IPs, enabling RDP and SSH via Azure credentials.

Explore how Azure encrypts data at rest and in transit, including server-side and customer-managed keys, client-side encryption, and Azure Key Vault for key management and transport layer security.