book

MCE Microsoft Certified Expert Cybersecurity Architect Study Guide

Name: MCE Microsoft Certified Expert Cybersecurity Architect Study Guide
ISBN: 9781394180219

by Kathiravan Udayakumar, Puthiyavan Udayakumar

May 2023

Intermediate to advanced

512 pages

14h 17m

English

Sybex

Read now

Unlock full access

Cover
Title Page
Copyright
Dedication
Acknowledgments
About the Authors
About the Technical Editor
Introduction
What Is Azure?About the SC-100 Certification ExamWhy Become a Certified Microsoft Azure Cybersecurity Architect?Preparing to Become a Certified Microsoft Cybersecurity ArchitectHow to Become a Certified Microsoft Cybersecurity ArchitectWho Should Buy This BookHow This Book Is OrganizedBonus Digital ContentsConventions Used in This BookUsing This BookSC-100 Exam ObjectivesHow to Contact the PublisherAssessment TestAnswers to Assessment Test
Chapter 1: Define and Implement an Overall Security Strategy and Architecture
Basics of Cloud ComputingIntroduction to CybersecurityCybersecurity DomainsGetting Started with Zero TrustDesign Integration Points in an ArchitectureDesign Security Needs to Be Based on Business GoalsDecode Security Requirements to Technical AbilitiesDesign Security for a Resiliency ApproachIdentify the Security Risks Associated with Hybrid and Multi-Tenant EnvironmentsPlan Traffic Filtering and Segmentation Technical and Governance StrategiesSummaryExam EssentialsReview Questions
Chapter 2: Define a Security Operations Strategy
Foundation of Security Operations and StrategyDesign a Logging and Auditing Strategy to Support Security OperationsDevelop Security Operations to Support a Hybrid or Multi-Cloud EnvironmentDesign a Strategy for SIEM and SOAREvaluate Security WorkflowsEvaluate a Security Operations Strategy for the Incident Management Life CycleEvaluate a Security Operations Strategy for Sharing Technical Threat IntelligenceSummaryExam EssentialsReview Questions
Chapter 3: Define an Identity Security Strategy
Design a Strategy for Access to Cloud ResourcesRecommend an Identity Store (Tenants, B2B, B2C, Hybrid)Recommend an Authentication and Authorization StrategyDesign a Strategy for Conditional AccessDesign a Strategy for Role Assignment and DelegationDesign a Security Strategy for Privileged Role Access to Infrastructure Including Identity-Based Firewall Rules and Azure PIMDesign a Security Strategy for Privileged Activities Including PAM, Entitlement Management, and Cloud Tenant AdministrationSummaryExam EssentialsReview Questions

Chapter 4: Identify a Regulatory Compliance Strategy
Interpret Compliance Requirements and Translate into Specific Technical CapabilitiesEvaluate Infrastructure Compliance by Using Microsoft Defender for CloudInterpret Compliance Scores and Recommend Actions to Resolve Issues or Improve SecurityDesign and Validate Implementation of Azure PolicyDesign for Data Residency RequirementsTranslate Privacy Requirements into Requirements for Security SolutionsSummaryExam EssentialsReview Questions
Chapter 5: Identify Security Posture and Recommend Technical Strategies to Manage Risk
Analyze Security Posture by Using Azure Security BenchmarkAnalyze Security Posture by Using Microsoft Defender for CloudAssess the Security Hygiene of Cloud WorkloadsEvaluate the Security Posture of Cloud WorkloadsDesign Security for an Azure Landing ZoneEvaluate Security Postures by Using Secure ScoresIdentify Technical Threats and Recommend Mitigation MeasuresRecommend Security Capabilities or Controls to Mitigate Identified RisksSummaryExam EssentialsReview Questions
Chapter 6: Define a Strategy for Securing Infrastructure
Plan and Deploy a Security Strategy Across TeamsDeploy a Process for Proactive and Continuous Evolution of a Security StrategySpecify Security Baselines for Server and Client EndpointsSpecify Security Baselines for the Server, Including Multiple Platforms and Operating SystemsSpecify Security Requirements for Mobile Devices and Clients, Including Endpoint Protection, Hardening, and ConfigurationSpecify Requirements for Securing Active Directory Domain ServicesDesign a Strategy to Manage Secrets, Keys, and CertificatesDesign a Strategy for Secure Remote AccessDesign a Strategy for Securing Privileged AccessSummaryExam EssentialsReview Questions
Chapter 7: Define a Strategy and Requirements for Securing PaaS, IaaS, and SaaS Services
Establish Security Baselines for SaaS, PaaS, and IaaS ServicesEstablish Security Requirements for IoT WorkloadsEstablish Security Requirements for Data Workloads, Including SQL Server, Azure SQL, Azure Synapse, and Azure Cosmos DBDefine the Security Requirements for Web WorkloadsDetermine the Security Requirements for Storage WorkloadsDefine Container Security RequirementsDefine Container Orchestration Security RequirementsSummaryExam EssentialsReview Questions
Chapter 8: Define a Strategy and Requirements for Applications and Data
Knowing the Application Threat Intelligence ModelSpecify Priorities for Mitigating Threats to ApplicationsSpecify a Security Standard for Onboarding a New ApplicationSpecify a Security Strategy for Applications and APIsSpecify Priorities for Mitigating Threats to DataDesign a Strategy to Identify and Protect Sensitive DataSpecify an Encryption Standard for Data at Rest and in MotionSummaryExam EssentialsReview Questions
Chapter 9: Recommend Security Best Practices and Priorities
Recommend Best Practices for Cybersecurity Capabilities and ControlsRecommend Best Practices for Protecting from Insider and External AttacksRecommend Best Practices for Zero Trust SecurityRecommend Best Practices for Zero Trust Rapid Modernization PlanRecommend a DevSecOps ProcessRecommend a Methodology for Asset ProtectionRecommend Strategies for Managing and Minimizing RiskPlan for Ransomware Protection and Extortion-Based AttacksProtect Assets from Ransomware AttacksRecommend Microsoft Ransomware Best PracticesSummaryExam EssentialsReview Questions
Appendix: Answers to Review Questions
Chapter 1: Define and Implement an Overall Security Strategy and ArchitectureChapter 2: Define a Security Operations StrategyChapter 3: Define an Identity Security StrategyChapter 4: Identify a Regulatory Compliance StrategyChapter 5: Identify Security Posture and Recommend Technical Strategies to Manage RiskChapter 6: Define a Strategy for Securing InfrastructureChapter 7: Define a Strategy and Requirements for Securing PaaS, IaaS, and SaaS ServicesChapter 8: Define a Strategy and Requirements for Applications and DataChapter 9: Recommend Security Best Practices and Priorities
Index
End User License Agreement

Overview

Prep for the SC-100 exam like a pro with Sybex’ latest Study Guide

In the MCE Microsoft Certified Expert Cybersecurity Architect Study Guide: Exam SC-100, a team of dedicated software architects delivers an authoritative and easy-to-follow guide to preparing for the SC-100 Cybersecurity Architect certification exam offered by Microsoft. In the book, you’ll find comprehensive coverage of the objectives tested by the exam, covering the evaluation of Governance Risk Compliance technical and security operations strategies, the design of Zero Trust strategies and architectures, and data and application strategy design.

With the information provided by the authors, you’ll be prepared for your first day in a new role as a cybersecurity architect, gaining practical, hands-on skills with modern Azure deployments. You’ll also find:

In-depth discussions of every single objective covered by the SC-100 exam and, by extension, the skills necessary to succeed as a Microsoft cybersecurity architect
Critical information to help you obtain a widely sought-after credential that is increasingly popular across the industry (especially in government roles)
Valuable online study tools, including hundreds of bonus practice exam questions, electronic flashcards, and a searchable glossary of crucial technical terms

An essential roadmap to the SC-100 exam and a new career in cybersecurity architecture on the Microsoft Azure cloud platform, MCE Microsoft Certified Expert Cybersecurity Architect Study Guide: Exam SC-100 is also ideal for anyone seeking to improve their knowledge and understanding of cloud-based management and security.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Cyber Security on Azure: An IT Professional’s Guide to Microsoft Azure Security

Publisher Resources

ISBN: 9781394180219Purchase Link

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills