book

Microsoft Cybersecurity Architect Exam Ref SC-100

by Dwayne Natwick

January 2023

Intermediate to advanced

272 pages

7h 2m

English

Packt Publishing

Read now

Unlock full access

ForewordContributorsAbout the authorAbout the reviewers
Who this book is forWhat this book coversTo get the most out of this bookDownload the color imagesConventions usedGet in touchShare Your ThoughtsDownload a free PDF copy of this book
What is cybersecurity?Evolution of cybersecurity from on-premises to the cloudDefense-in-depth security strategyBuilding a defense-in-depth security postureShared responsibility in cloud securityCybersecurity architecture use casesSecurity operationsUnderstanding the stages of a cyber attackUnderstanding the scope of cybersecurity in the cloudShared responsibility scopePrinciples of the zero-trust methodologyCommon threats and attacksInternal threatsExternal threatsSummary
Identifying the integration points in an architecture by using the Microsoft Cybersecurity Reference ArchitectureHow are the MCRA used?What are the components of the MCRA?Translating business goals into security requirementsThreat analysisTranslating security requirements into technical capabilitiesPhysicalIdentity and accessPerimeter securityNetwork securityComputeApplicationsDataDesigning security for a resiliency strategyIntegrating a hybrid or multi-tenant environment into a security strategyDeveloping a technical and governance strategy for traffic filtering and segmentationSummary
Designing a logging and auditing strategy to support security operationsSecurity operations overviewMicrosoft security operations toolsLogging and auditing for threat and vulnerability detectionDeveloping security operations to support a hybrid or multi-cloud environmentDesigning a strategy for SIEM and SOAREvaluating security workflowsSecurity strategies for incident management and responseSecurity workflowsEvaluating a security operations strategy for the incident management life cycleEvaluating a security operations strategy for sharing technical threat intelligenceSummary
Zero Trust for identity and access managementDesigning a strategy for access to cloud resourcesRecommending an identity storeAzure AD tenant synchronization with SCIMB2BB2CRecommending an authentication and authorization strategyHybrid identity infrastructureSecure authorization methodsDesigning a strategy for CADesigning a strategy for role assignment and delegationDesigning a security strategy for privileged role accessAzure AD PIMDesigning a security strategy for privileged activitiesPrivileged access reviewsEntitlement management (aka permission management)Cloud tenant administrationCase study – designing a Zero Trust architectureSummary
Interpreting compliance requirements and translating them into specific technical capabilitiesEvaluating infrastructure compliance by using Microsoft Defender for CloudInterpreting compliance scores and recommending actions to resolve issues or improve securityDesigning the implementation of Azure PolicyDesigning for data residency requirementsTranslating privacy requirements into requirements for security solutionsCase study – designing for regulatory complianceSummary

Evaluating the security posture by using benchmarksEvaluating the security posture by using Microsoft Defender for CloudEvaluating the security posture by using Secure ScoresEvaluating the security posture of cloud workloadsDesigning security for an Azure Landing ZoneInterpreting technical threat intelligence and recommending risk mitigationsRecommending security capabilities or controls to mitigate identified risksCase study – evaluating the security postureSummary
Planning and implementing a security strategy across teamsSpecifying security baselines for server and client endpointsSpecifying security requirements for servers, including multiple platforms and operating systemsSpecifying security requirements for mobile devices and clients, including endpoint protection, hardening, and configurationSpecifying requirements to secure AD DSDesigning a strategy to manage secrets, keys, and certificatesDesigning a strategy for secure remote accessUnderstanding security operations frameworks, processes, and proceduresCase study – designing a secure architecture for endpointsSummary
Specifying security baselines for SaaS, PaaS, and IaaS servicesSecurity baselines for SaaSSecurity baselines for IaaSSecurity baselines for PaaSSpecifying security requirements for IoT workloadsSpecifying security requirements for data workloads, including SQL, Azure SQL Database, Azure Synapse, and Azure Cosmos DBSpecifying security requirements for storage workloads, including Azure StorageSpecifying security requirements for web workloads, including Azure App ServiceSpecifying security requirements for containersSpecifying security requirements for container orchestrationCase study – security requirements for IaaS, PaaS, and SaaSSummary
Specifying priorities for mitigating threats to applicationsIdentity and secrets handling and useSegmentation and configurationStatic and dynamic testingData handling and accessSecurity posture management and workload protectionSpecifying a security standard for onboarding a new applicationSpecifying a security strategy for applications and APIsCase study – security requirements for applicationsSummary
Specifying priorities for mitigating threats to dataManaging the risk to dataRansomware protection and recoveryDesigning a strategy to identify and protect sensitive dataSpecifying an encryption standard for data at rest and in motionEncryption at restEncryption in transitIdentity and secrets handling and useCase study – designing a strategy to secure dataSummary
Case study sample responsesChapter 4 – designing a zero-trust architectureChapter 5 – designing for regulatory complianceChapter 6 – evaluating the security postureChapter 7 – designing a secure architecture for endpointsChapter 8 – security requirements for IaaS, PaaS, and SaaSChapter 9 – security requirements for applicationsChapter 10 – designing a strategy to secure dataMock exam practice questionsQuestionsMock exam answers and chapter referenceSummary
Technical requirementsPreparing for a Microsoft examResources to prepare for the examAccess to a subscriptionWhere to take the examExam formatResources available and accessing Microsoft LearnAccessing Microsoft LearnFinding content on Microsoft LearnExam pages on Microsoft LearnCreating a Microsoft 365 trial subscriptionOffice 365 or Microsoft 365 trial subscriptionEnterprise Mobility + Security subscriptionSetting up a free month of Azure servicesExam objectivesWho should take the SC-100 exam?Summary
Other Books You May EnjoyPackt is searching for authors like youShare Your ThoughtsDownload a free PDF copy of this book

Overview

Microsoft Cybersecurity Architect Exam Ref SC-100 provides a thorough preparation resource for IT and security professionals aiming to pass the SC-100 exam and improve their security strategy design skills. You'll gain insights into designing a secure Microsoft cloud and hybrid architecture, implementing zero-trust principles, and effectively preparing for exam success.

What this Book will help me do

Design highly secure and efficient zero-trust architectures for cloud and hybrid environments.
Develop strategies for governance, risk management, and compliance under Microsoft architectures.
Effectively secure infrastructure components, data, and applications with robust frameworks.
Evaluate security operations to enhance the organization's defensive capability.
Confidently prepare for the SC-100 exam using sample questions and a detailed mock exam.

Author(s)

Dwayne Natwick is a seasoned cybersecurity architect with a rich experience in designing and securing IT systems on the Microsoft platform. His hands-on experience and comprehensive knowledge led him to create this guide for security professionals preparing for the SC-100 examination. Dwayne is known for his approachable teaching style and his ability to break down complex topics into clear and actionable advice.

Who is it for?

This book is ideal for cybersecurity professionals such as architects, engineers, and Microsoft 365 administrators who are preparing for the SC-100 exam. Those currently designing or refining Microsoft cloud and hybrid architectures will find value in the detailed strategies provided. It is most suited for readers with a solid understanding of Microsoft 365 and Azure services, as well as familiarity with security and compliance principles, looking to advance their certification and expertise.