Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC900)

Microsoft Security, Compliance, and Identity Fundamentals (SC-900T00)

Module 1: Describe security and compliance concepts

• Describe the shared responsibility model
• Describe defense in depth
• Describe the Zero Trust model
• Describe encryption and hashing
• Describe compliance concepts

Module 2: Describe identity concepts

• Define authentication and authorization
• Define Identity as the primary security perimeter
• Describe the role of the identity provider
• Describe the concept of directory services and Active Directory
• Describe the concept of Federation

Module 3: Describe the function and identity types of Microsoft Entra ID

• Describe Microsoft Entra ID
• Describe types of identities
• Describe hybrid identity
• Describe external identities

Module 4: Describe the authentication capabilities of Microsoft Entra ID

• Describe authentication methods
• Describe multifactor authentication
• Describe self-service password reset
• Describe password protection and management capabilities

Module 5: Describe access management capabilities of Microsoft Entra ID

• Describe Conditional Access
• Describe Microsoft Entra roles and role-based access control (RBAC)

Module 6: Describe the identity protection and governance capabilities of Microsoft Entra

• Describe Microsoft Entra ID Governance
• Describe access reviews
• Describe entitlement management
• Describe the capabilities of Privileged identity Management
• Describe Microsoft Entra ID Protection
• Describe Microsoft Entra Permissions Management
• Describe Microsoft Entra Verified ID

Module 7: Describe core infrastructure security services in Azure

• Describe Azure DDoS protection
• Describe Azure Firewall
• Describe Web Application Firewall
• Describe network segmentation in Azure
• Describe Azure Network Security groups
• Describe Azure Bastion
• Describe Azure Key Vault

Module 8: Describe security management capabilities of Azure

• Describe Cloud security posture management
• Describe Microsoft Defender for Cloud
• Describe the enhanced security of Microsoft Defender for Cloud
• Describe the Microsoft cloud security benchmark and security baselines for Azure

Module 9: Describe security capabilities of Microsoft Sentinel

• Define the concepts of SIEM and SOAR
• Describe threat detection and mitigation capabilities in Microsoft Sentinel
• Describe Microsoft Security Copilot

Module 10: Describe threat protection with Microsoft 365 Defender

• Describe Microsoft 365 Defender services
• Describe Microsoft Defender for Office 365
• Describe Microsoft Defender for Endpoint
• Describe Microsoft Defender for Cloud Apps
• Describe Microsoft Defender for Identity
• Describe the Microsoft 365 Defender portal

Module 11: Describe Microsoft’s Service Trust portal and privacy capabilities

• Describe the offerings of the Service Trust portal
• Describe Microsoft's privacy principles
• Describe Microsoft Priva

Module 12: Describe the compliance management capabilities in Microsoft Purview

• Describe the Microsoft Purview compliance portal
• Describe Compliance Manager
• Describe use and benefits of compliance score
• Knowledge check

Module 13: Describe information protection and data lifecycle management in Microsoft Purview

• Know your data, protect your data, and govern your data
• Describe the data classification capabilities of the compliance portal
• Describe sensitivity labels and policies
• Describe data loss prevention
• Describe retention policies and retention labels
• Describe records management

Module 14: Describe insider risk capabilities in Microsoft Purview

• Describe insider risk management
• Describe communication compliance
• Describe information barriers

Module 15: Describe the eDiscovery and audit capabilities of Microsoft Purview

• Describe the eDiscovery solutions in Microsoft Purview
• Describe the audit solutions in Microsoft Purview

Module 16: Describe resource governance capabilities in Azure

• Describe Azure Policy
• Describe the use of Azure Blueprints
• Describe the capabilities in the Microsoft Purview governance portal