Microsoft Certified: Cybersecurity Architect Expert (AZ500-SC100)

Microsoft Azure Security Technologies (AZ-500T00)

Module 1: Manage Identity and Access

This module covers Azure Active Directory, Azure Identity Protection, Enterprise Governance, Azure AD PIM, and Hybrid Identity.

• Azure Active Directory
• Azure Identity Protection
• Enterprise Governance
• Azure AD Privileged Identity Management
• Hybrid Identity

Module 2: Implement Platform Protection

This module covers perimeter, network, host, and container security.

• Perimeter Security
• Network Security
• Host Security
• Container Security

Module 3: Secure Data and Applications

This module covers Azure Key Vault, application security, storage security, and SQL database security.

• Azure Key Vault
• Application Security
• Storage Security
• SQL Database Security

Module 4: Manage Security Operations

This module covers Azure Monitor, Azure Security Center, and Azure Sentinel.

• Azure Monitor
• Azure Security Center
• Azure Sentinel

Microsoft Cybersecurity Architect (SC-100T00)

Module 1: Build an overall security strategy and architecture

• Zero Trust overview
• Develop Integration points in an architecture
• Develop security requirements based on business goals
• Translate security requirements into technical capabilities
• Design security for a resiliency strategy
• Design a security strategy for hybrid and multi-tenant environments
• Design technical and governance strategies for traffic filtering and segmentation

Module 2: Design a security operations strategy

• Understand security operations frameworks, processes, and procedures
• Design a logging and auditing security strategy
• Develop security operations for hybrid and multicloud environments
• Design a strategy for Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR)
• Evaluate security workflows
• Review security strategies for incident management
• Evaluate security operations for technical threat intelligence
• Monitor sources for insights on threats and mitigations

Module 3: Design an identity security strategy

• Secure access to cloud resources
• Recommend an identity store for security
• Recommend secure authentication and security authorization strategies
• Secure conditional access
• Design a strategy for role assignment and delegation
• Define Identity governance for access reviews and entitlement management
• Design a security strategy for privileged role access to infrastructure
• Design a security strategy for privileged activities

Module 4: Evaluate a regulatory compliance strategy

• Interpret compliance requirements and their technical capabilities
• Evaluate infrastructure compliance by using Microsoft Defender for Cloud
• Interpret compliance scores and recommend actions to resolve issues or improve security
• Design and validate implementation of Azure Policy
• Design for data residency requirements
• Translate privacy requirements into requirements for security solutions

Module 5: Evaluate security posture and recommend technical strategies to manage risk

• Evaluate security postures by using benchmarks
• Evaluate security postures by using Microsoft Defender for Cloud
• Evaluate security hygiene of cloud workloads
• Design security for an Azure Landing Zone
• Interpret technical threat intelligence and recommend risk mitigations
• Evaluate security postures by using secure scores
• Recommend security capabilities or controls to mitigate identified risks

Module 6: Understand architecture best practices and how they are changing with the Cloud

• Plan and implement a security strategy across teams
• Establish a process for proactive and continuous evolution of a security strategy

Module 7: Design a strategy for securing server and client endpoints

• Specify security baselines for server and client endpoints
• Specify security requirements for servers
• Specify security requirements for mobile devices and clients
• Specify requirements for securing Active Directory Domain Services
• Design a strategy to manage secrets, keys, and certificates
• Design a strategy for secure remote access
• Plan for endpoint forensics

Module 8: Design a strategy for securing PaaS, IaaS, and SaaS services

• Specify security baselines for PaaS services
• Specify security baselines for IaaS services
• Specify security baselines for SaaS services
• Specify security requirements for IoT workloads
• Specify security requirements for data workloads
• Specify security requirements for web workloads
• Specify security requirements for storage workloads
• Specify security requirements for containers
• Specify security requirements for container orchestration

Module 9: Specify security requirements for applications

• Understand application threat modeling
• Specify priorities for mitigating threats to applications
• Specify a security standard for onboarding a new application
• Specify a security strategy for applications and APIs

Module 10: Design a strategy for securing data

• Prioritize mitigating threats to data
• Design a strategy to identify and protect sensitive data
• Specify an encryption standard for data at rest and in motion

Module 11: Recommend security best practices using Microsoft Cybersecurity Reference Architectures (MCRA) and Microsoft Cloud Security Benchmarks

• Recommend best practices for cybersecurity capabilities and controls
• Recommend best practices for protecting from insider and external attacks
• Recommend best practices for Zero Trust security
• Recommend best practices for Zero Trust Rapid Modernization Plan

Module 12: Recommend a secure methodology using the Cloud Adoption Framework (CAF)

• Recommend a DevSecOps process
• Recommend a methodology for asset protection
• Recommend strategies for managing and minimizing risk

Module 13: Recommend a ransomware strategy by using Microsoft Security Best Practices

• Plan for ransomware protection and extortion-based attacks
• Protect assets from ransomware attacks
• Recommend Microsoft ransomware best practices