This is an advanced, expert-level course. Although not required to attend, students are strongly encouraged to have taken and passed another associate level certification in the security, compliance and identity portfolio (such as AZ-500, SC-200 or SC-300) before attending this class. This course prepares students with the expertise to design and evaluate cybersecurity strategies in the following areas: Zero Trust, Governance Risk Compliance (GRC), security operations (SecOps), and data and applications. Students will also learn how to design and architect solutions using zero trust principles and specify security requirements for cloud infrastructure in different service models (SaaS, PaaS, IaaS).
Questions about this? let our team answer them!
Course Outline
1. Introduction to Zero Trust and best practice frameworks
• Describe antipatterns and best practices
• Describe the concept of Zero Trust
• Describe the frameworks
• Describe the Zero Trust adoption framework
• Describe how the frameworks relate to each other
2. Design security solutions that align with the Cloud Adoption Framework (CAF) and Well-Architected Framework (WAF)
• Understand the Cloud Adoption Framework
• Understand the Cloud Adoption Framework secure methodology
• Understand Azure landing zones
• Design security with Azure landing zones
• Understand the Well-Architected Framework
• Understand the Well-Architected Framework security pillar
• Evaluate a security strategy
• Define a security strategy
• Recommend solutions for security and governance
• Design secure DevSecOps processes
• Design a strategy for secure AI adoption
3. Design solutions that align with the Microsoft Cybersecurity Reference Architecture (MCRA) and Microsoft cloud security benchmark (MCSB)
• Describe the Microsoft Cybersecurity Reference Architecture
• Describe the Microsoft Cloud Security Benchmark
• Design solutions with best practices for capabilities and controls
• Design solutions with best practices for protecting against insider, external and supply chain attacks.
• Design AI solutions that align to the Microsoft Cloud Security Benchmark
• Design solutions that align with the Zero Trust adoption framework
4. Design a resiliency strategy for ransomware and other attacks based on Microsoft Security Best Practices
• Common cyberthreats and attack patterns
• Support business resiliency
• Design solutions for mitigating ransomware attacks, including prioritization of BCDR and privileged access
• Design solutions for business continuity and disaster recovery (BCDR), including secure backup and restore
• Evaluate solutions for security updates
5. Design solutions for regulatory compliance
• Translate compliance requirements into security controls
• AI compliance considerations
• Design a solution to address compliance requirements by using Microsoft Purview
• Address security and compliance requirements with Azure Policy
• Evaluate and validate alignment with regulatory standards and benchmarks by using Microsoft Defender for Cloud
6. Design solutions for identity and access management
• Design a solution for access to SaaS, PaaS, IaaS, hybrid, and multicloud resources
• Design a solution for Microsoft Entra ID, including hybrid and multicloud environments
• Design a solution for external identities
• Design modern authentication and authorization strategies
• Design a solution for agent identities using Microsoft Entra Agent ID
• Design Conditional Access policies for AI agents
• Validate alignment of Conditional Access policies with a Zero Trust strategy
• Specify requirements for securing Active Directory Domain Services
• Design a solution to manage secrets, keys, and certificates
7. Design solutions for securing privileged access
• Secure privileged access
• Design privileged role assignment using the Enterprise Access Model
• Evaluate security and governance with Microsoft Entra ID solutions
• Design a solution to secure tenant administration
• Design a solution for cloud infrastructure entitlement management
• Design a solution for privileged access workstations and remote access
• Evaluate an access review management solution
8. Design solutions for security operations
• Describe the function of Security operations (SecOps)
• Design monitoring to support hybrid and multicloud environments
• Design solutions to support centralized logging and auditing
• Design solutions for detection and response that includes extended detection and response (XDR) and security information and event management (SIEM)
• Design a solution for security orchestration, automation, and response (SOAR)
• Design and evaluate security workflows, including incident response, threat hunting, and incident management
• Design and evaluate threat detection coverage by using MITRE ATT&CK matrices, including Cloud, Enterprise, Mobile, and ICS
9. Interactive case study: Modernizing identity and data security
• Interactive case study
• Interactive case study highlights
10. Interactive case study: Modernizing user access control and threat resilience
• Interactive case study
• Interactive case study highlights
11. Evaluate solutions for securing Microsoft 365
• Evaluate security posture for productivity and collaboration workloads by using metrics
• Evaluate how Microsoft Defender for Office 365 and Microsoft Defender for Cloud Apps protect productivity workloads
• Evaluate how Microsoft Intune protects and manages endpoints
• Evaluate solutions for securing data in Microsoft 365 using Microsoft Purview
• Evaluate how data security and compliance controls protect organizational data used by Microsoft 365 Copilot
12. Design solutions for securing applications
• Design and implement standards to secure application development
• Design a full lifecycle strategy for application security
• Evaluate security posture of existing application portfolios
• Evaluate application threats with threat modeling
• Secure access for workload identities
• Design a solution for API management and security
• Design a solution for secure access to applications
• Map technologies to application security requirements
13. Design solutions for securing an organization’s data
• Data security design principles and frameworks
• Evaluate solutions for data discovery and classification
• Specify priorities for mitigating threats to data
• Evaluate solutions for encryption of data at rest and in transit, including Azure KeyVault and infrastructure encryption
• Design data security for Azure workloads
• Design security for data used in AI workloads
• Design security for Azure Storage
• Design a security solution with Microsoft Defender for SQL and Microsoft Defender for Storage
14. Interactive case study: Securing apps and data
• Interactive case study
• Interactive case study highlights
15. Specify requirements for securing SaaS, PaaS, and IaaS services
• Specify security baselines for SaaS, PaaS, and IaaS services
• Specify security requirements for IoT workloads
• Specify security requirements for web workloads
• Specify security requirements for containers and container orchestration
• Specify security requirements for AI workloads
• Evaluate security for Microsoft Foundry workloads
16. Design solutions for security posture management in hybrid and multicloud environments
• Evaluate security posture by using Microsoft Defender for Cloud, including the Microsoft cloud security benchmark
• Evaluate security posture by using Microsoft Secure Score
• Design integrated posture management solutions that include Microsoft Defender for Cloud in hybrid and multicloud environments
• Select cloud workload protection solutions in Microsoft Defender for Cloud
• Design a solution for integrating hybrid and multicloud environments by using Azure Arc
• Design a solution for Microsoft Defender External Attack Surface Management
• Specify requirements and priorities for a posture management process that uses Microsoft Security Exposure Management attack paths
17. Design solutions for securing server and client endpoints
• Introduction to endpoint security
• Specify security requirements for servers
• Specify security requirements for mobile devices and clients
• Specify security requirements for IoT devices and embedded systems
• Evaluate solutions for securing operational technology (OT) and industrial control systems (ICS) by using Microsoft Defender for IoT
• Specify security baselines for server and client endpoints
• Design a solution for secure remote access
• Evaluate Windows Local Admin Password Solution (LAPS) solutions
18. Design solutions for network security
• Evaluate network designs to align with security requirements and best practices
• Design solutions for network segmentation
• Design solutions for traffic filtering with network security groups
• Design solutions for network posture management
• Design solutions for network monitoring
• Evaluate solutions that use Microsoft Entra Internet Access
• Evaluate solutions that use Microsoft Entra Private Access
19. Interactive case study: Securing endpoints and infrastructure
• Interactive case study
• Interactive case study highlights
Course Details
• Not required to attend, but students are strongly encouraged to have taken and passed another associate level certification in the security, compliance and identity portfolio (such as AZ-500, SC-200 or SC-300).
• Conceptual knowledge of security policies, requirements, Zero Trust architecture, and management of hybrid environments.
• Working experience with Zero Trust strategies, applying security policies, and developing security requirements based on business goals.
• Advanced experience and knowledge in identity and access, platform protection, security operations, securing data and securing applications.
• Experience with hybrid and cloud implementations.
This course is for experienced cloud security engineers who have taken a previous certification in the security, compliance and identity portfolio. Specifically, students should have advanced experience and knowledge in a wide range of security engineering areas, including identity and access, platform protection, security operations, securing data, and securing applications. They should also have experience with hybrid and cloud implementations. Beginning students should instead take the course SC-900: Microsoft Security, Compliance, and Identity Fundamentals.
For online (live) format
NextGen Newsletter
Don’t miss a thing! Sign up to receive updates and exclusive content.
© NextGen Skills LLC. All rights reserved.
1207 Delaware Ave, #4405, Wilmington, Delaware 19806, US
