book

Microsoft Cybersecurity Architect Exam Ref SC-100

Name: Microsoft Cybersecurity Architect Exam Ref SC-100
Author: Dwayne Natwick
ISBN: 9781803242392

by Dwayne Natwick

January 2023

Intermediate to advanced

272 pages

7h 2m

English

Packt Publishing

Audiobook available

Read now

Unlock full access

Microsoft Cybersecurity Architect Exam Ref SC-100
ForewordContributorsAbout the authorAbout the reviewers
Preface
Who this book is forWhat this book coversTo get the most out of this bookDownload the color imagesConventions usedGet in touchShare Your ThoughtsDownload a free PDF copy of this book
Part 1: The Evolution of Cybersecurity in the Cloud
Chapter 1: Cybersecurity in the Cloud
What is cybersecurity?Evolution of cybersecurity from on-premises to the cloudDefense-in-depth security strategyBuilding a defense-in-depth security postureShared responsibility in cloud securityCybersecurity architecture use casesSecurity operationsUnderstanding the stages of a cyber attackUnderstanding the scope of cybersecurity in the cloudShared responsibility scopePrinciples of the zero-trust methodologyCommon threats and attacksInternal threatsExternal threatsSummary
Part 2: Designing a Zero-Trust Strategy and Architecture
Chapter 2: Building an Overall Security Strategy and Architecture
Identifying the integration points in an architecture by using the Microsoft Cybersecurity Reference ArchitectureHow are the MCRA used?What are the components of the MCRA?Translating business goals into security requirementsThreat analysisTranslating security requirements into technical capabilitiesPhysicalIdentity and accessPerimeter securityNetwork securityComputeApplicationsDataDesigning security for a resiliency strategyIntegrating a hybrid or multi-tenant environment into a security strategyDeveloping a technical and governance strategy for traffic filtering and segmentationSummary
Chapter 3: Designing a Security Operations Strategy
Designing a logging and auditing strategy to support security operationsSecurity operations overviewMicrosoft security operations toolsLogging and auditing for threat and vulnerability detectionDeveloping security operations to support a hybrid or multi-cloud environmentDesigning a strategy for SIEM and SOAREvaluating security workflowsSecurity strategies for incident management and responseSecurity workflowsEvaluating a security operations strategy for the incident management life cycleEvaluating a security operations strategy for sharing technical threat intelligenceSummary
Chapter 4: Designing an Identity Security Strategy
Zero Trust for identity and access managementDesigning a strategy for access to cloud resourcesRecommending an identity storeAzure AD tenant synchronization with SCIMB2BB2CRecommending an authentication and authorization strategyHybrid identity infrastructureSecure authorization methodsDesigning a strategy for CADesigning a strategy for role assignment and delegationDesigning a security strategy for privileged role accessAzure AD PIMDesigning a security strategy for privileged activitiesPrivileged access reviewsEntitlement management (aka permission management)Cloud tenant administrationCase study – designing a Zero Trust architectureSummary
Part 3: Evaluating Governance, Risk, and Compliance (GRC) Technical Strategies and Security Operations Strategies
Chapter 5: Designing a Regulatory Compliance Strategy
Interpreting compliance requirements and translating them into specific technical capabilitiesEvaluating infrastructure compliance by using Microsoft Defender for CloudInterpreting compliance scores and recommending actions to resolve issues or improve securityDesigning the implementation of Azure PolicyDesigning for data residency requirementsTranslating privacy requirements into requirements for security solutionsCase study – designing for regulatory complianceSummary

Chapter 6: Evaluating the Security Posture and Recommending Technical Strategies to Manage Risk
Evaluating the security posture by using benchmarksEvaluating the security posture by using Microsoft Defender for CloudEvaluating the security posture by using Secure ScoresEvaluating the security posture of cloud workloadsDesigning security for an Azure Landing ZoneInterpreting technical threat intelligence and recommending risk mitigationsRecommending security capabilities or controls to mitigate identified risksCase study – evaluating the security postureSummary
Part 4: Designing Security for Infrastructure
Chapter 7: Designing a Strategy for Securing Server and Client Endpoints
Planning and implementing a security strategy across teamsSpecifying security baselines for server and client endpointsSpecifying security requirements for servers, including multiple platforms and operating systemsSpecifying security requirements for mobile devices and clients, including endpoint protection, hardening, and configurationSpecifying requirements to secure AD DSDesigning a strategy to manage secrets, keys, and certificatesDesigning a strategy for secure remote accessUnderstanding security operations frameworks, processes, and proceduresCase study – designing a secure architecture for endpointsSummary
Chapter 8: Designing a Strategy for Securing SaaS, PaaS, and IaaS
Specifying security baselines for SaaS, PaaS, and IaaS servicesSecurity baselines for SaaSSecurity baselines for IaaSSecurity baselines for PaaSSpecifying security requirements for IoT workloadsSpecifying security requirements for data workloads, including SQL, Azure SQL Database, Azure Synapse, and Azure Cosmos DBSpecifying security requirements for storage workloads, including Azure StorageSpecifying security requirements for web workloads, including Azure App ServiceSpecifying security requirements for containersSpecifying security requirements for container orchestrationCase study – security requirements for IaaS, PaaS, and SaaSSummary
Part 5: Designing a Strategy for Data and Applications
Chapter 9: Specifying Security Requirements for Applications
Specifying priorities for mitigating threats to applicationsIdentity and secrets handling and useSegmentation and configurationStatic and dynamic testingData handling and accessSecurity posture management and workload protectionSpecifying a security standard for onboarding a new applicationSpecifying a security strategy for applications and APIsCase study – security requirements for applicationsSummary
Chapter 10: Designing a Strategy for Securing Data
Specifying priorities for mitigating threats to dataManaging the risk to dataRansomware protection and recoveryDesigning a strategy to identify and protect sensitive dataSpecifying an encryption standard for data at rest and in motionEncryption at restEncryption in transitIdentity and secrets handling and useCase study – designing a strategy to secure dataSummary
Chapter 11: Case Study Responses and Final Assessment/Mock Exam
Case study sample responsesChapter 4 – designing a zero-trust architectureChapter 5 – designing for regulatory complianceChapter 6 – evaluating the security postureChapter 7 – designing a secure architecture for endpointsChapter 8 – security requirements for IaaS, PaaS, and SaaSChapter 9 – security requirements for applicationsChapter 10 – designing a strategy to secure dataMock exam practice questionsQuestionsMock exam answers and chapter referenceSummary
Appendix: Preparing for Your Microsoft Exam
Technical requirementsPreparing for a Microsoft examResources to prepare for the examAccess to a subscriptionWhere to take the examExam formatResources available and accessing Microsoft LearnAccessing Microsoft LearnFinding content on Microsoft LearnExam pages on Microsoft LearnCreating a Microsoft 365 trial subscriptionOffice 365 or Microsoft 365 trial subscriptionEnterprise Mobility + Security subscriptionSetting up a free month of Azure servicesExam objectivesWho should take the SC-100 exam?Summary
Index
Why subscribe?
Other Books You May EnjoyPackt is searching for authors like youShare Your ThoughtsDownload a free PDF copy of this book

Content preview from Microsoft Cybersecurity Architect Exam Ref SC-100

8 Designing a Strategy for Securing SaaS, PaaS, and IaaS

The previous chapter discussed designing a strategy for securing servers and client endpoints. This chapter will discuss designing a strategy for securing SaaS, PaaS, and IaaS infrastructures. This chapter will include building a security baseline for each of these services as well as security requirements for the container, edge computing, application services, databases, and storage accounts within Azure.

In this chapter, we are going to cover the following main topics:

Specifying security baselines for SaaS, PaaS, and IaaS services
Specifying security requirements for IoT workloads
Specifying security requirements for data workloads, including SQL, Azure SQL Database, Azure Synapse, ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Exam Ref SC-100 Microsoft Cybersecurity Architect

Publisher Resources

ISBN: 9781803242392

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Microsoft Cybersecurity Architect Exam Ref SC-100

by Dwayne Natwick

8

Designing a Strategy for Securing SaaS, PaaS, and IaaS

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.