In early August the SC-900 exam was updated with minor changes. This time round the changes are just minor corrections or clarifications of items. Considering that the exam had a major update earlier in the yearit would be surprising if this was a major update.
If you work with Azure and Microsoft 365 security and compliance capabilities, now falling under the Microsoft Purview branding, this should be a pretty straight forward exam for you. If you only focus on the security or compliance capabilities, or only Azure or Microsoft 365, make sure you focus your preparation on the areas that you are least familiar with.
The final note for this exam that I’ve received feedback on is that for many people who are familiar with Microsoft 365 and Azure, but not necessarily the security and compliance components, is that the wording/language used may not what they are used to. I guess you could view this is it being industry terminology that is being used, rather than Microsoft speak, so make sure that you don’t skip past any unusual wording in your preparation.
Describe the Concepts of Security, Compliance, and Identity (10-15%)
Describe security and compliance concepts
- describe the shared responsibility model
- define defense in depth
- describe the Zero-Trust methodology
- describe encryption and hashing
- describe compliance concepts
Describe identity concepts
- define identity as the primary security perimeter
- define authentication
- define authorization
- describe identity providers
- describe Active Directory
- describe the concept of Federation
Describe the capabilities of Microsoft Azure Active Directory (Azure AD), part of Microsoft Entra (25-30%)
Describe the basic identity services and identity types of Azure AD
- describe Azure Active Directory
- describe Azure AD identities
- describe hybrid identity
- describe the different external identity types
Describe the authentication capabilities of Azure AD
- describe the authentication methods available in Azure AD
- describe Multi-factor Authentication
- describe self-service password reset
- describe password protection and management capabilities available in Azure AD
Describe access management capabilities of Azure AD
- describe conditional access
- describe the benefits of Azure AD roles
- describe the benefits of Azure AD role-based access control
Describe the identity protection & governance capabilities of Azure AD
- describe identity governance in Azure AD
- describe entitlement management and access reviews
- describe the capabilities ofAzure AD Privileged Identity Management (PIM)
- describe Azure AD Identity Protection
Describe the capabilities of Microsoft Security Solutions (25-30%)
Describe basic security capabilities in Azure
- describe Azure DDoS protection
- describe Azure Firewall
- describe Web Application Firewall
- describe Network Segmentation with Azure Virtual Networks
- describe Azure Network Security groups
- describe Azure Bastion and just-in-time (JIT) Access
- describe ways Azure encrypts data
Describe security management capabilities of Azure
- describe Cloud security posture management (CSPM)
- describe Microsoft Defender for Cloud
- describe the enhanced security features of Microsoft Defender for Cloud
- describe security baselines for Azure
Describe security capabilities of Microsoft Sentinel
- define the concepts of SIEM and SOAR
- describe how Microsoft Sentinel provides integrated threat protection
Describe threat protection with Microsoft 365 Defender
- describe Microsoft 365 Defender services
- describe Microsoft Defender for Identity
- describe Microsoft Defender for Office 365
- describe Microsoft Defender for Endpoint
- describe Microsoft Defender for Cloud Apps
- describe the Microsoft 365 Defender portal
Describe the Capabilities of Microsoft Compliance Solutions (25-30%)
Describe Microsoft’s Service Trust Portal and privacy principles
- describe the offerings of the service trust portal
- describe Microsoft’s privacy principles
Describe the compliance management capabilities of Microsoft Purview
- describe the Microsoft Purview compliance portal
- describe compliance manager
- describe the use and benefits of compliance score
Describe information protection and governance capabilities of Microsoft Purview
- describe data classification capabilities
- describe the value of Content explorer and Activity explorer
- describe sensitivity labels and sensitivity label policies
- describe Data Loss Prevention
- describe Records Management
- describe Retention Polices. Retention Labels and retention label policies
Describe insider risk capabilities in Microsoft Purview
- describe Insider risk management
- describe communication compliance
- describe information barriers
Describe resource governance capabilities in Azure
- Describe Azure Policy
- describe Azure Blueprint
- describe Azure Purview
Check out my other exam reference guides here.
intunedin.net 