book

Microsoft Cybersecurity Architect Exam Ref SC-100 - Second Edition

Name: Microsoft Cybersecurity Architect Exam Ref SC-100 - Second Edition
ISBN: 9781836208518

by Dwayne Natwick, Graham Gold, Abu Zobayer

October 2024

Intermediate to advanced

300 pages

7h 33m

English

Packt Publishing

Read now

Unlock full access

Microsoft Cybersecurity Architect Exam Ref SC-100
Second EditionContributorsAbout the AuthorsAbout the Reviewers
Preface
Who This Book Is ForWhat This Book CoversHow to Get the Most Out of This BookOnline Practice ResourcesDownload the Color ImagesConventions UsedGet in TouchShare Your ThoughtsDownload a Free PDF Copy of This Book
Chapter 1: Cybersecurity in the Cloud
Making the Most of This Book – Your Certification and BeyondWhat Is Cybersecurity?Significance in Modern BusinessCybersecurity in the Context of the SC-100 ExamEvolution of Cybersecurity from On-Premises to the CloudDefense-in-Depth Security StrategyBuilding a Defense-in-Depth Security PostureShared Responsibility in Cloud SecurityUnderstanding the Stages of a Cyber-AttackHow Cybersecurity Architecture Can Protect Against These ThreatsSecurity OperationsUnderstanding the Scope of Cybersecurity in the CloudShared Responsibility ScopePrinciples of the Zero-Trust MethodologyCommon Threats and AttacksInternal ThreatsExternal ThreatsDefense in Depth: A Real-Life ExampleAdditional Example: OktaInitial Signs of CompromiseImpactImpactRemediationDefense in DepthSummaryExam Readiness Drill – Chapter Review SectionHow to Get Started
Chapter 2: Build an Overall Security Strategy and Architecture
Identifying the Integration Points in an Architecture by Using the Microsoft Cybersecurity Reference ArchitecturesHow is the MCRA Used?What Are the Components of the MCRA?Translating Business Goals into Security RequirementsThreat AnalysisTranslating Security Requirements into Technical CapabilitiesPhysicalIdentity and A ccessPerimeter securityNetwork SecurityComputeApplicationsDataDesigning Security for a Resiliency StrategyIntegrating a Hybrid or Multi-Tenant Environment into a Security StrategyDeveloping a Technical and Governance Strategy for Traffic Filtering and SegmentationNorth-South/East-West Network Traffic and SegmentationSummaryExam Readiness Drill – Chapter Review SectionHow to Get Started
Chapter 3: Design a Security Operations Strategy
Designing a Logging and Auditing Strategy to Support Security Operations, Including Microsoft Purview AuditSecurity Operations OverviewMicrosoft Security Operations ToolsLogging and Auditing for Threat and Vulnerability DetectionMicrosoft Purview AuditDeveloping Security Operations to Support a Hybrid or Multi-Cloud EnvironmentDesigning a strategy for SIEM and SOAREvaluating Security WorkflowsSecurity Strategies for Incident Management and ResponseSecurity WorkflowsEvaluating a Security Operations Strategy for the Incident Management Life CycleEvaluating a Security Operations Strategy to Share Technical Threat IntelligenceLeveraging Artificial Intelligence to Enhance Security OperationsMicrosoft Copilot for SecuritySummaryExam Readiness Drill – Chapter Review SectionHow to Get Started
Chapter 4: Design an Identity Security Strategy
Zero Trust for Identity and Access ManagementDesigning a Strategy for Access to Cloud ResourcesRecommending an Identity StoreMicrosoft Entra Tenant Synchronization with SCIMExternal IdentitiesRecommending an Authentication and Authorization StrategyHybrid Identity InfrastructureSecure Authorization MethodsDesigning a Strategy for CAMicrosoft Entra Identity ProtectionDesigning a Strategy for CAEDesigning a Strategy for Role Assignment and DelegationDesigning a Security Strategy for Privileged Role AccessMicrosoft Entra ID PIMDesigning a Security Strategy for Privileged ActivitiesPrivileged Access ReviewsEntitlement Management (aka Permission Management)Cloud Tenant AdministrationCase study – Designing a Zero-Trust ArchitectureSummaryExam Readiness Drill – Chapter Review SectionHow to Get Started
Chapter 5: Design a Regulatory Compliance Strategy
Interpreting Compliance Requirements and Translating Them into Specific Technical CapabilitiesEvaluating Infrastructure Compliance by Using Microsoft Defender for CloudInterpreting Compliance Scores and Recommending Actions to Resolve Issues or Improve SecurityDesigning an Implementation of Azure PolicyDesigning for Data Residency RequirementsTranslating Privacy Requirements into Requirements for Security SolutionsCase Study – Designing for Regulatory ComplianceSummaryExam Readiness Drill – Chapter Review SectionHow to Get Started
Chapter 6: Evaluate Security Posture and Recommend Technical Strategies to Manage Risk
Evaluating the Security Posture Using BenchmarksEvaluating the Security Posture Using Microsoft Defender for CloudEvaluating the Security Posture by Using Secure ScoreEvaluating the Security Posture of Cloud WorkloadsDesigning Security for an Azure Landing ZoneInterpreting Technical Threat Intelligence and Recommending Risk MitigationsRecommending Security Capabilities or Controls to Mitigate Identified RisksEvaluating the Security of Internet Assets with Microsoft Defender EASMCase Study – Evaluating the Security PostureSummaryExam Readiness Drill – Chapter Review SectionHow to Get Started
Chapter 7: Design a Strategy for Securing Server and Client Endpoints
Planning and Implementing a Security Strategy across TeamsSpecifying Security Baselines for Server and Client EndpointsSpecifying Security Requirements for Servers, Including Multiple Platforms and Operating SystemsSpecifying Security Requirements for Mobile Devices and Clients, Including Endpoint Protection, Hardening, and ConfigurationEvaluating Windows LAPS SolutionsHow Do You Manage Local Admin Passwords in Windows?Introduction of Microsoft LAPSReplacement of Microsoft LAPS with Windows LAPSDeployment Considerations for Windows LAPSSpecifying requirements to Secure AD DSDesigning a Strategy to Manage Secrets, Keys, and CertificatesDesigning a Strategy for Secure Remote AccessRemote Management of Servers and ApplicationsRemote Management of Mobile Devices and ClientsUnderstanding Security Operations Frameworks, Processes, and ProceduresCase Study – Designing a Secure Architecture for EndpointsSummaryExam Readiness Drill – Chapter Review SectionHow to Get Started
Chapter 8: Design a Strategy for Securing SaaS, PaaS, and IaaS
Specifying Security Baselines for SaaS, PaaS, and IaaS ServicesSecurity Baselines for SaaSSecurity Baselines for IaaSSecurity Baselines for PaaSSpecifying Security Requirements for IoT Devices and Connected SystemsDevice SecurityConnection SecurityCloud SecurityEvaluating Solutions for Securing OT and Industrial Control Systems (ICSs) by Using Microsoft Defender for IoTCloud-Connected SensorsLocal OT SensorsSpecifying Security Requirements for Data Workloads, Including SQL, Azure SQL Database, Azure Synapse, and Azure Cosmos DBSpecifying Security Requirements for Storage Workloads, Including Azure StorageSpecifying Security Requirements for Web Workloads, Including Azure App ServiceSpecifying Security Requirements for ContainersSpecifying Security Requirements for Container OrchestrationEvaluating Solutions That Include Azure AI Services SecurityWhat Are Azure AI Services?Security ConsiderationsCase Study – Security Requirements for IaaS, PaaS, and SaaSSummaryExam Readiness Drill – Chapter Review SectionHow to Get Started

Chapter 9: Specify Security Requirements for Applications
Specifying Priorities for Mitigating Threats to ApplicationsIdentity and Secret Handling and UseSegmentation and ConfigurationStatic and Dynamic TestingData Handling and AccessSecurity Posture Management and Workload ProtectionSpecifying a Security Standard for Onboarding a New ApplicationDesigning a Security Solution for API ManagementCase Study – Security Requirements for ApplicationsSummaryExam Readiness Drill – Chapter Review SectionHow to Get Started
Chapter 10: Design a Strategy for Securing Data
Specifying Priorities for Mitigating Threats to DataManaging the Risk to DataRansomware Protection and RecoveryDesigning a Strategy to Identify and Protect Sensitive DataSpecifying an Encryption Standard for Data at Rest and in MotionEncryption at RestData MaskingEncryption in TransitManaging Data Encryption Security with Azure Key VaultIdentity and Secret Handling and UseCase Study – Designing a Strategy to Secure DataSummaryExam Readiness Drill – Chapter Review SectionHow to Get Started
Chapter 11: Accessing the Online Practice Resources
How to Access These MaterialsPurchased from Packt Store (packtpub.com)Packt+ SubscriptionPurchased from Amazon and Other SourcesTroubleshooting TipsShare FeedbackBack to the Book
Why Subscribe?
Other Books You May EnjoyShare Your ThoughtsDownload a Free PDF Copy of This Book

Overview

Microsoft Cybersecurity Architect Exam Ref SC-100 is your comprehensive guide to mastering the skills required to pass the SC-100 certification exam and enhance your cybersecurity architecture expertise. This book provides a detailed walkthrough of strategies like implementing zero trust principles and evaluating governance, enabling you to confidently tackle challenges in designing robust security frameworks.

What this Book will help me do

Design advanced cybersecurity architecture using zero-trust principles.
Evaluate governance, risk, and compliance strategies for cloud and hybrid environments.
Utilize Microsoft Defender tools to assess and boost security posture.
Apply strong encryption standards for data security and privacy.
Translate organizational security goals into actionable technical solutions.

Author(s)

Dwayne Natwick, Graham Gold, and Abu Zobayer are seasoned cybersecurity professionals with years of experience in designing and managing complex security solutions. They share a deep knowledge of Microsoft technologies and a passion for educating professionals. Their expertise and practical insights make this book an indispensable resource for learners aiming for certification.

Who is it for?

This book is designed for IT professionals looking to achieve the Microsoft Cybersecurity Architect Expert SC-100 certification. If you have foundational experience with administrative tasks in Microsoft Azure, Microsoft 365, and on-premises services like Active Directory and networking, this is for you. Enhance your career with next-level cybersecurity architecture skills and certification.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Microsoft Cybersecurity Architect Exam Ref SC-100

Publisher Resources

ISBN: 9781836208518

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills