book

Microsoft Cybersecurity Architect Exam Ref SC-100

Name: Microsoft Cybersecurity Architect Exam Ref SC-100
Author: Dwayne Natwick
ISBN: 9781803242392

by Dwayne Natwick

January 2023

Intermediate to advanced

272 pages

7h 2m

English

Packt Publishing

Read now

Unlock full access

Microsoft Cybersecurity Architect Exam Ref SC-100
ForewordContributorsAbout the authorAbout the reviewers
Preface
Who this book is forWhat this book coversTo get the most out of this bookDownload the color imagesConventions usedGet in touchShare Your ThoughtsDownload a free PDF copy of this book
Part 1: The Evolution of Cybersecurity in the Cloud
Chapter 1: Cybersecurity in the Cloud
What is cybersecurity?Evolution of cybersecurity from on-premises to the cloudDefense-in-depth security strategyBuilding a defense-in-depth security postureShared responsibility in cloud securityCybersecurity architecture use casesSecurity operationsUnderstanding the stages of a cyber attackUnderstanding the scope of cybersecurity in the cloudShared responsibility scopePrinciples of the zero-trust methodologyCommon threats and attacksInternal threatsExternal threatsSummary
Part 2: Designing a Zero-Trust Strategy and Architecture
Chapter 2: Building an Overall Security Strategy and Architecture
Identifying the integration points in an architecture by using the Microsoft Cybersecurity Reference ArchitectureHow are the MCRA used?What are the components of the MCRA?Translating business goals into security requirementsThreat analysisTranslating security requirements into technical capabilitiesPhysicalIdentity and accessPerimeter securityNetwork securityComputeApplicationsDataDesigning security for a resiliency strategyIntegrating a hybrid or multi-tenant environment into a security strategyDeveloping a technical and governance strategy for traffic filtering and segmentationSummary
Chapter 3: Designing a Security Operations Strategy
Designing a logging and auditing strategy to support security operationsSecurity operations overviewMicrosoft security operations toolsLogging and auditing for threat and vulnerability detectionDeveloping security operations to support a hybrid or multi-cloud environmentDesigning a strategy for SIEM and SOAREvaluating security workflowsSecurity strategies for incident management and responseSecurity workflowsEvaluating a security operations strategy for the incident management life cycleEvaluating a security operations strategy for sharing technical threat intelligenceSummary
Chapter 4: Designing an Identity Security Strategy
Zero Trust for identity and access managementDesigning a strategy for access to cloud resourcesRecommending an identity storeAzure AD tenant synchronization with SCIMB2BB2CRecommending an authentication and authorization strategyHybrid identity infrastructureSecure authorization methodsDesigning a strategy for CADesigning a strategy for role assignment and delegationDesigning a security strategy for privileged role accessAzure AD PIMDesigning a security strategy for privileged activitiesPrivileged access reviewsEntitlement management (aka permission management)Cloud tenant administrationCase study – designing a Zero Trust architectureSummary
Part 3: Evaluating Governance, Risk, and Compliance (GRC) Technical Strategies and Security Operations Strategies
Chapter 5: Designing a Regulatory Compliance Strategy
Interpreting compliance requirements and translating them into specific technical capabilitiesEvaluating infrastructure compliance by using Microsoft Defender for CloudInterpreting compliance scores and recommending actions to resolve issues or improve securityDesigning the implementation of Azure PolicyDesigning for data residency requirementsTranslating privacy requirements into requirements for security solutionsCase study – designing for regulatory complianceSummary

Chapter 6: Evaluating the Security Posture and Recommending Technical Strategies to Manage Risk
Evaluating the security posture by using benchmarksEvaluating the security posture by using Microsoft Defender for CloudEvaluating the security posture by using Secure ScoresEvaluating the security posture of cloud workloadsDesigning security for an Azure Landing ZoneInterpreting technical threat intelligence and recommending risk mitigationsRecommending security capabilities or controls to mitigate identified risksCase study – evaluating the security postureSummary
Part 4: Designing Security for Infrastructure
Chapter 7: Designing a Strategy for Securing Server and Client Endpoints
Planning and implementing a security strategy across teamsSpecifying security baselines for server and client endpointsSpecifying security requirements for servers, including multiple platforms and operating systemsSpecifying security requirements for mobile devices and clients, including endpoint protection, hardening, and configurationSpecifying requirements to secure AD DSDesigning a strategy to manage secrets, keys, and certificatesDesigning a strategy for secure remote accessUnderstanding security operations frameworks, processes, and proceduresCase study – designing a secure architecture for endpointsSummary
Chapter 8: Designing a Strategy for Securing SaaS, PaaS, and IaaS
Specifying security baselines for SaaS, PaaS, and IaaS servicesSecurity baselines for SaaSSecurity baselines for IaaSSecurity baselines for PaaSSpecifying security requirements for IoT workloadsSpecifying security requirements for data workloads, including SQL, Azure SQL Database, Azure Synapse, and Azure Cosmos DBSpecifying security requirements for storage workloads, including Azure StorageSpecifying security requirements for web workloads, including Azure App ServiceSpecifying security requirements for containersSpecifying security requirements for container orchestrationCase study – security requirements for IaaS, PaaS, and SaaSSummary
Part 5: Designing a Strategy for Data and Applications
Chapter 9: Specifying Security Requirements for Applications
Specifying priorities for mitigating threats to applicationsIdentity and secrets handling and useSegmentation and configurationStatic and dynamic testingData handling and accessSecurity posture management and workload protectionSpecifying a security standard for onboarding a new applicationSpecifying a security strategy for applications and APIsCase study – security requirements for applicationsSummary
Chapter 10: Designing a Strategy for Securing Data
Specifying priorities for mitigating threats to dataManaging the risk to dataRansomware protection and recoveryDesigning a strategy to identify and protect sensitive dataSpecifying an encryption standard for data at rest and in motionEncryption at restEncryption in transitIdentity and secrets handling and useCase study – designing a strategy to secure dataSummary
Chapter 11: Case Study Responses and Final Assessment/Mock Exam
Case study sample responsesChapter 4 – designing a zero-trust architectureChapter 5 – designing for regulatory complianceChapter 6 – evaluating the security postureChapter 7 – designing a secure architecture for endpointsChapter 8 – security requirements for IaaS, PaaS, and SaaSChapter 9 – security requirements for applicationsChapter 10 – designing a strategy to secure dataMock exam practice questionsQuestionsMock exam answers and chapter referenceSummary
Appendix: Preparing for Your Microsoft Exam
Technical requirementsPreparing for a Microsoft examResources to prepare for the examAccess to a subscriptionWhere to take the examExam formatResources available and accessing Microsoft LearnAccessing Microsoft LearnFinding content on Microsoft LearnExam pages on Microsoft LearnCreating a Microsoft 365 trial subscriptionOffice 365 or Microsoft 365 trial subscriptionEnterprise Mobility + Security subscriptionSetting up a free month of Azure servicesExam objectivesWho should take the SC-100 exam?Summary
Index
Why subscribe?
Other Books You May EnjoyPackt is searching for authors like youShare Your ThoughtsDownload a free PDF copy of this book

Overview

Microsoft Cybersecurity Architect Exam Ref SC-100 provides a thorough preparation resource for IT and security professionals aiming to pass the SC-100 exam and improve their security strategy design skills. You'll gain insights into designing a secure Microsoft cloud and hybrid architecture, implementing zero-trust principles, and effectively preparing for exam success.

What this Book will help me do

Design highly secure and efficient zero-trust architectures for cloud and hybrid environments.
Develop strategies for governance, risk management, and compliance under Microsoft architectures.
Effectively secure infrastructure components, data, and applications with robust frameworks.
Evaluate security operations to enhance the organization's defensive capability.
Confidently prepare for the SC-100 exam using sample questions and a detailed mock exam.

Author(s)

Dwayne Natwick is a seasoned cybersecurity architect with a rich experience in designing and securing IT systems on the Microsoft platform. His hands-on experience and comprehensive knowledge led him to create this guide for security professionals preparing for the SC-100 examination. Dwayne is known for his approachable teaching style and his ability to break down complex topics into clear and actionable advice.

Who is it for?

This book is ideal for cybersecurity professionals such as architects, engineers, and Microsoft 365 administrators who are preparing for the SC-100 exam. Those currently designing or refining Microsoft cloud and hybrid architectures will find value in the detailed strategies provided. It is most suited for readers with a solid understanding of Microsoft 365 and Azure services, as well as familiarity with security and compliance principles, looking to advance their certification and expertise.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Exam Ref SC-100 Microsoft Cybersecurity Architect

Publisher Resources

ISBN: 9781803242392

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills