Microsoft Security, Compliance, and Identity Fundamentals SC-900The Complete Beginner's Guide

Core Security Concepts

Objective 1.1 · SCI Concepts

Identity Concepts

Objective 1.2 · SCI Concepts

Compliance Concepts

Objective 1.3 · SCI Concepts

Zero Trust Architecture Principles

Objective 1.1

Shared Responsibility Model in Azure

Objective 1.1

Defence-in-Depth Security Layers

Objective 1.1

Authentication vs Authorisation

Objective 1.2

The Modern Threat Landscape

Objective 1.1

Common Attack Types: Phishing, Ransomware, DDoS

Objective 1.1

Encryption Fundamentals for SC-900

Objective 1.1

Compliance Frameworks: ISO 27001, NIST, SOC 2

Objective 1.3

GDPR, HIPAA, and Global Privacy Laws

Objective 1.3

Microsoft Zero Trust Assessment Tool

Objective 1.1

Security Operations Model and SOC Functions

Objective 1.1

Hashing and Digital Signatures

Objective 1.1

Microsoft Entra ID

Objective 2.1 · Identity Access

Authentication and MFA in Entra

Objective 2.2 · Identity Access

Conditional Access Policies

Objective 2.3 · Identity Access

Entra ID Roles and RBAC

Objective 2.4 · Identity Access

Microsoft Entra Identity Protection

Objective 2.5 · Identity Access

Microsoft Entra External Identities: B2B and B2C

Objective 2.1

Privileged Identity Management (PIM)

Objective 2.2

Microsoft Entra Access Reviews

Objective 2.3

Microsoft Entra Permissions Management

Objective 2.4

Entra Workload Identities and Service Principals

Objective 2.5

Windows Hello for Business and FIDO2

Objective 2.2

Microsoft Authenticator and SSPR

Objective 2.2

OAuth 2.0 and OpenID Connect in Entra

Objective 2.1

SAML and Single Sign-On (SSO)

Objective 2.1

Microsoft Entra Password Protection

Objective 2.2

Self-Service Password Reset (SSPR)

Objective 2.2

Entra ID App Registrations

Objective 2.1

Entra ID Enterprise Applications

Objective 2.1

Microsoft Entra Verified ID

Objective 2.5

Security Defaults in Entra ID

Objective 2.2

Named Locations in Conditional Access

Objective 2.3

Terms of Use and Authentication Strengths

Objective 2.3

Cross-Tenant Access Settings

Objective 2.1

Hybrid Identity with Entra Connect

Objective 2.1

Microsoft Entra Domain Services

Objective 2.1

Lifecycle Workflows in Entra ID Governance

Objective 2.3

Microsoft Entra Global Secure Access

Objective 2.5

Entra Internet Access and Private Access

Objective 2.5

Identity Governance in Microsoft Entra

Objective 2.3

Microsoft Defender for Cloud

Objective 3.1 · Security Solutions

Microsoft Sentinel

Objective 3.2 · Security Solutions

Microsoft Defender XDR

Objective 3.3 · Security Solutions

Azure DDoS Protection and Firewall

Objective 3.4 · Security Solutions

Microsoft Defender for Office 365

Objective 3.1

Microsoft Defender for Cloud Apps

Objective 3.2

Microsoft Defender for Endpoint

Objective 3.3

Microsoft Defender for Identity

Objective 3.3

Microsoft Secure Score

Objective 3.4

Microsoft Intune for Endpoint Security

Objective 3.4

Microsoft Security Baselines

Objective 3.4

Microsoft Defender Portal Overview

Objective 3.1

Azure Network Security Groups and Firewalls

Objective 3.4

Azure Private Link Basics

Objective 3.4

Shadow IT Discovery in Defender for Cloud Apps

Objective 3.2

Session and Access Policies in Defender for Cloud Apps

Objective 3.2

Cloud Security Posture Management (CSPM)

Objective 3.1

Defender for Cloud Workload Protections

Objective 3.1

Sentinel Incidents and Alerts Overview

Objective 3.2

Logic Apps Playbooks in Sentinel

Objective 3.2

Defender for Endpoint Onboarding

Objective 3.3

Attack Surface Reduction Rules

Objective 3.3

Cloud App Governance and App Consent

Objective 3.2

Microsoft 365 Defender Portal Overview

Objective 3.3

Azure Key Vault Basics

Objective 3.4

Azure NSG and Application Security Groups

Objective 3.4

Azure Web Application Firewall (WAF)

Objective 3.4

Defender Vulnerability Management Basics

Objective 3.3

Threat and Vulnerability Management

Objective 3.3

Basic KQL Queries in Sentinel

Objective 3.2

Microsoft Purview

Objective 4.1 · Compliance Solutions

Compliance Manager

Objective 4.2 · Compliance Solutions

Information Protection and DLP

Objective 4.3 · Compliance Solutions

eDiscovery and Audit

Objective 4.4 · Compliance Solutions

Azure Policy for Compliance

Objective 4.1

Sensitivity Labels and Information Protection

Objective 4.2

Retention Policies and Labels

Objective 4.2

Insider Risk Management

Objective 4.3

Communication Compliance

Objective 4.3

Data Residency, Sovereignty, and Privacy

Objective 4.4

GDPR and Global Privacy Regulations Overview

Objective 4.4

Azure Policy and Initiatives

Objective 4.1

Management Groups and Subscription Governance

Objective 4.1

Records Management in Microsoft Purview

Objective 4.2

Data Classification in Microsoft Purview

Objective 4.2

Microsoft Compliance Manager Score

Objective 4.2

Azure Blueprints for Compliance

Objective 4.1

Microsoft Purview Compliance Portal

Objective 4.1

Content Explorer for Data Discovery

Objective 4.2

Exact Data Match for Sensitive Info Types

Objective 4.3

DLP Policies for Microsoft Teams

Objective 4.3

eDiscovery Standard vs Premium

Objective 4.4

Audit Log Retention Policies

Objective 4.4

Microsoft Privacy Principles

Objective 4.4

Service Trust Portal

Objective 4.4

Azure Policy Effects: Audit, Deny, Modify

Objective 4.1

Azure Resource Locks: ReadOnly and Delete

Objective 4.1

Advanced Audit in Microsoft 365

Objective 4.4

Trainable Classifiers for Content Classification

Objective 4.2