book

Microsoft 365 Security Administration: MS-500 Exam Guide

by Peter Rising

June 2020

Intermediate to advanced

672 pages

12h 27m

English

Packt Publishing

Read now

Unlock full access

Why subscribe?ContributorsAbout the authorAbout the reviewersPackt is searching for authors like you
Who this book is forWhat this book coversTo get the most out of this bookDownload the color imagesConventions usedGet in touchReviews
Planning your hybrid environmentSynchronization methods with Azure AD ConnectPassword hash synchronizationPass-through authentication FederationClaims-based authentication Federated trusts Azure AD Seamless Single Sign-OnAdditional authentication securityMulti-factor authentication Self-service password reset Conditional Access Event monitoring and troubleshooting in Azure AD ConnectSummaryQuestionsReferences
Implementing Azure AD dynamic group membershipCreating a dynamic group in Azure AD using the Azure portalCreating dynamic groups with Azure AD PowerShellUsing group-based licensing in Azure ADImplementing Azure AD self-service password reset (SSPR)Setting up SSPRRegistering for SSPRUsing SSPR to reset passwordsCombined registration for SSPR and MFAImplementing and managing Multi-Factor Authentication (MFA)Enabling MFAService settingsConfiguring the secondary authentication methodManaging Azure AD access reviewsPerforming an access reviewSummaryQuestionsReferences
Explaining Conditional AccessCreating a simple Conditional Access policyEnhancing Conditional Access with IntuneDevice-based Conditional AccessCreating a device-based Conditional Access policyApp-based Conditional AccessCreating an app-based Conditional Access policyMonitoring Conditional Access eventsSummaryQuestionsReferences
Planning, configuring, and monitoring RBACPlanning RBACHow role assignments workConfiguring RBACManaging RBAC using PowerShellMonitoring RBACPlanning, configuring, and monitoring PIMPlanning PIMConfiguring PIMTasks:Manage:Monitoring PIMSummaryQuestionsReferences
Understanding Identity ProtectionConfiguring MFA registration policiesConfiguring alert optionsUsers at risk detected alertsWeekly digestManaging and resolving risk eventsExamining users at riskExamining risky sign-insExamining risk detectionsSummaryQuestionsReferences
Identifying the organizational needs for Azure ATPUnderstanding suspicious activityExploring advanced attacks and malicious activitiesUnderstanding the Azure ATP architectureStage 1Stage 2Stage 3Setting up an Azure ATP instanceAdditional configuration optionsManaging Azure ATP activities The security alerts timeline in the Azure ATP portalAzure ATP reportsThe Azure ATP workspace health centerSummaryQuestionsReferences

Technical requirements Licensing requirementsSupported operating systemsImplementing Microsoft Defender ATPConfiguring Microsoft Defender ATPManaging and monitoring Microsoft Defender ATPAttack surface reduction capabilitiesThe Secure score dashboardIntegrating with Azure ATPThe Microsoft Defender Security Center settingsImplementing additional Microsoft Defender features Configuring Microsoft Defender Application GuardConfiguring Microsoft Defender Application ControlConfiguring Microsoft Defender Exploit GuardUsing WIP to configure WIP policies and protect dataManaging device encryption for your Windows 10 devicesIntroduction to BitLockerSummaryQuestionsReferences
Protecting users and domains with ATP anti-phishing protection and policiesSetting up an ATP anti-phishing policyConfiguring Impersonation settingsConfiguring spoof settingsConfiguring Advanced settingsConfiguring Office 365 anti-spam protectionDefault spam filter policyConnection filter policyOutbound spam filter policySpoof intelligence policyAdditional email authentication protectionConfiguring Office 365 anti-spam settings and policies with PowerShellExploring Office 365 ATP Safe Attachments options and policiesCreating a Safe Attachments policy from the Security and Compliance CenterCreating a Safe Attachments policy using Windows PowerShellExploring Office 365 ATP Safe Links options, blocked URLs, and policiesViewing or modifying the default Safe Links policy from the Security and Compliance CenterCreating a new Safe Links policy from the Security and Compliance CenterCreating a Safe Links policy using Windows PowerShellSummaryQuestionsReferences
Understanding the Office 365 threat management security dashboardThreat protection statusInsightsThreat IntelligenceTrendsUsing Office 365 Threat Explorer and threat trackersUsing Threat ExplorerUsing threat trackersManaging quarantined messages and filesPerforming controlled simulated attacksLaunching an attackSummaryQuestionsReferences
Planning and configuring Azure SentinelEnabling Azure SentinelConnecting Azure Sentinel to data sourcesUsing Azure Sentinel playbooksManaging and monitoring Azure SentinelAzure Sentinel Overview Azure Sentinel LogsThreat management toolsSummaryQuestionsReferences
Understanding privileged access managementEnabling PAMSubmitting and approving PAM requestsUnderstanding Customer LockboxEnabling Customer LockboxResponding to Customer Lockbox requestsProtecting access to the collaboration components of Office 365Allowing external user access with B2B sharingSummaryQuestionsReferences
Planning and implementing an AIP deployment for your organizationChecking AIP activation status using the Office 365 Admin CenterChecking AIP activation status using the Azure portalChecking AIP activation status using the Azure AIPService PowerShellConfiguring AIP superusersSetting up AIP labels and policiesSetting up labelsSetting up label policiesEnabling Unified labelingUser experienceUsing the AIP Scanner to detect and protect on-premises contentInstalling the AIP ScannerTracking and revoking protected documentsSummaryQuestionsReferences
Planning and implementing DLPCreating DLP policies and assigning them to Office 365 locationsTesting your DLP policyEditing your DLP policyManaging sensitive information typesDLP reporting and alerting capabilitiesSummaryQuestionsReferences
Understanding Cloud App SecurityCloud DiscoverySanctioning or unsanctioning cloud appsUsing app connectors to gain visibility and control of third-party appsUsing Azure AD Conditional Access App Control in conjunction with Cloud App SecurityUsing built-in policies or creating custom policies to control SaaS app usageConfiguring Cloud App SecurityConfiguring Cloud DiscoverySanctioning and unsanctioning appsConnecting appsControlling apps with policiesUsing Conditional Access App Control with Cloud App SecurityUsing the Cloud App Security dashboard, reports, and logsSummaryQuestionsReferences
Understanding Desktop Analytics, Windows diagnostics, and Office TelemetryDesktop AnalyticsWindows diagnosticsOffice TelemetryConfiguring Office 365 auditingTurning on the audit logPerforming an audit log searchConfiguring an audit alert policySummaryQuestionsReferences
Conducting searches for personal dataUsing retention labels to protect personal dataAccessing logs and reports to search for and monitor personal data leaksData loss prevention reportsAlert policiesMicrosoft Cloud App SecuritySummaryQuestionsReferences
Understanding data governance and the retention requirements for your organizationThe content is modified or deleted during the retention periodThe content is unchanged during the retention periodMailbox and public folder contentNavigating data governance reports and dashboardsConfiguring retention tags, retention policies, and supervision policiesCreating a retention policy using the Exchange admin centerCreating a retention policy using the Security & Compliance Center Creating a supervision policyConfiguring litigation holds to preserve Office 365 dataLitigation HoldImporting data into Office 365 from the Security & Compliance CenterConfiguring archivingSummaryQuestionsReferences
Understanding eDiscovery and content search in Microsoft 365eDiscovery casesContent searchAdvanced eDiscoveryeDiscovery delegated role groupsCreating eDiscovery cases, placing locations on hold, and performing content searchesCreating an eDiscovery case and placing locations on holdPerforming a content searchExporting content search resultsSummaryQuestionsReferences
Planning for regulatory compliance in Microsoft 365Phase 1 – the first 30 daysPhase 2 – after 90 daysPhase 3 – ongoingAccessing the GDPR dashboards and reportsService Trust PortalMicrosoft Compliance ScoreThe GDPR dashboard and the GDPR toolboxCompleting DSRsSummaryQuestionsReferences
Case StudyOverviewInternal network configurationCloud configurationPlanned changesSecurity requirementsGeneral requirements
Answers and explanations
Chapter 1 – Planning for Hybrid IdentityChapter 2 – Authentication and SecurityChapter 3 – Implementing Conditional Access PoliciesChapter 4 – Role Assignment and Privileged Identities in Microsoft 365Chapter 5 – Azure AD Identity ProtectionChapter 6 – Configuring an Advanced Threat Protection SolutionChapter 7 – Configuring Microsoft Defender ATP to Protect DevicesChapter 8 – Message Protection in Office 365Chapter 9 – Threat Intelligence and TrackingChapter 10 – Using Azure Sentinel to Monitor Microsoft 365 SecurityChapter 11 – Controlling Secure Access to Information Stored in Office 365Chapter 12 – Azure Information ProtectionChapter 13 – Data Loss PreventionChapter 14 – Cloud App Discovery and SecurityChapter 15 – Security Analytics and Auditing CapabilitiesChapter 16 – Personal Data Protection in Microsoft 365Chapter 17 – Data Governance and RetentionChapter 18 – Search and InvestigationChapter 19 – Data Privacy Compliance
Leave a review - let other readers know what you think

Overview

"Microsoft 365 Security Administration: MS-500 Exam Guide" equips you with the skills and knowledge required to confidently navigate Microsoft 365 security and compliance features. Through this comprehensive guide, you'll explore identity management, threat protection, and advanced configuration strategies to secure hybrid environments. Prepare to excel at the MS-500 exam and advance your professional expertise.

What this Book will help me do

Gain expertise in configuring identity and access management within Microsoft 365.
Master techniques to implement and monitor threat protection using advanced tools.
Develop the ability to manage governance and compliance tasks for secure data handling.
Acquire skills to deploy and manage information protection strategies effectively.
Confidently prepare for the MS-500 certification exam with dedicated practice materials.

Author(s)

The author of this book, None Rising, is a seasoned professional with extensive experience in Microsoft certifications and IT security. With a strong background in managing enterprise-level IT environments, they bring practical insights and expertise to their writing. Their approachable and systematic teaching style ensures readers successfully grasp complex concepts.

Who is it for?

This book is ideal for IT professionals seeking to deepen their knowledge of Microsoft 365 security. Whether you're an administrator aiming to enhance organizational security or an aspiring Microsoft-certified security administrator preparing for the MS-500 exam, this book offers clear guidance. Tailored for both beginners familiar with basic IT concepts and experienced professionals aiming to advance, this guide caters to varying levels of expertise.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Start your free trial

Exam Ref MS-500 Microsoft 365 Security Administration

Publisher Resources

ISBN: 9781838983123

Microsoft 365 Security Administration: MS-500 Exam Guide

by Peter Rising

Overview

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

You might also like

Exam Ref MS-500 Microsoft 365 Security Administration

Beginning Security with Microsoft Technologies: Protecting Office 365, Devices, and Data

Exam Ref MS-100 Microsoft 365 Identity and Services

Exam Ref MS-100 Microsoft 365 Identity and Services, 2nd Edition

Publisher Resources

Overview

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,and much more.

You might also like

Exam Ref MS-500 Microsoft 365 Security Administration

Beginning Security with Microsoft Technologies: Protecting Office 365, Devices, and Data

Exam Ref MS-100 Microsoft 365 Identity and Services

Exam Ref MS-100 Microsoft 365 Identity and Services, 2nd Edition

Publisher Resources

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.