Microsoft has introduced a new CORE certification, also known as SC-900 or “Microsoft Security, Compliance, and Identity Fundamentals”. People who want to become familiar with the core principles of security, compliance, and identity (SCI) over cloud-based and its associated Microsoft services should take this exam. You can visit this Microsoft Docs page to learn more about SC-900. It describes the various skills assessed and acquired through its 4 Learning Modules.
What is the SC-900?
The SC-900 Microsoft Security, Compliance and Identity Fundamentals test is designed to determine your level of proficiency in:
- Security, Compliance, and Identity
- Microsoft identity and access management solutions.
- Microsoft security solutions and compliance solutions.
SC-900: Prerequisites
Student prerequisites for this course include:
- Basic knowledge of networking principles and cloud computing.
- Basic professional experience in an IT field or general IT expertise.
- Basic knowledge of Microsoft 365 and Azure.
Things you will learn in SC-900 Microsoft Certification: Course outline
The syllabus of the SC-900 exam is classified into four sections. These are as follows:
- SC-900 Module 1: Includes the topics like Compliance, Security, and Identity (5 – 10%).
- SC-900 Module 2: Includes topics like Microsoft Identity Solutions and Access Management (25 – 30%).
- SC-900 Module 3: Incorporates Microsoft Security Solutions (30 – 35%).
- SC-900 Module 4: Describes the capabilities of Microsoft Compliance Solutions (25 – 30%).
This course offers a fundamental understanding of security, compliance, identity concepts, and associated Microsoft cloud-based solutions. This course’s material aligns with the SC 900 exam’s target domain. You must be acquainted with Azure and Microsoft 365 and comprehend how you may integrate these solution areas with Microsoft security, compliance, and identity solutions to offer a comprehensive end-to-end solution.
Module 1: Explains the concepts of security, compliance, and identity
You will learn about fundamental concepts that form the basis for security, compliance, and identity solutions, such as data residency, shared responsibility, zero trust, the function of identity providers, and much more.
Lessons
- Principles of Security and Compliance
- Principles of Identity
Students who complete this module will be eligible to:
- Describe the fundamental principles of security and compliance.
- Describe the fundamental principles of identity.
Module 2: Explain the capabilities of Microsoft Azure Active Directory (an element of Microsoft Entra)
Azure Active Directory is Microsoft Cloud’s identity and access management tool. Here you will learn about the secure authentication, identity principles, and access management features of Azure Active Directory (Azure AD), along with identity protection and governance.
Lessons
- The fundamental services and identity types of Azure AD
- The access management capabilities of Azure AD.
- The authentication capabilities of Azure AD.
- The identity protection and governance capabilities of Azure AD.
- Lab: Examine Azure Active Directory
- Lab: Examine Azure Active Directory
- Lab: Examine conditional access for access control in Azure AD
- Lab: Examine identity governance in Azure AD using privileged identity management.
Students who complete this module will be eligible to:
- Describe the fundamental identity types and services offered by Azure AD.
- Describe Azure AD’s authentication capabilities.
- Describe Azure AD’s features for access management.
- Describe Azure AD’s identity protection and governance features.
Module 3: Explain the capabilities of Microsoft security solutions
Here you will learn about Microsoft’s security solutions. The aspects covered in this module are:
- Azure’s network and platform capabilities.
- Microsoft Sentinel.
- Azure security management with Microsoft Defender for Cloud.
In addition, you will learn about threat protection with Microsoft 365 Defender.
Lessons
- Azure’s fundamental security capabilities
- Azure’s capabilities for security management
- Microsoft Sentinel’s security capabilities
- Microsoft 365 Defender’s threat protection capabilities
- Lab: Examine Microsoft Defender for Cloud Apps
- Lab: Examine Azure Network Security Groups (NSGs)
- Lab: Examine Microsoft Sentinel
- Lab: Examine Azure Network Security Groups (NSGs)
- Lab: Examine Microsoft Defender for Cloud
Students who complete this module will be eligible to:
- Describe Azure’s fundamental security capabilities.
- Describe Azure’s capabilities for security management.
- Describe Microsoft Sentinel’s security capabilities.
- Describe Microsoft 365 Defender’s threat protection capabilities.
Module 4: Explain the capabilities of Microsoft compliance solutions
Here you will learn more about privacy at Microsoft and the Service Trust Portal. You will become familiar with Microsoft Purview, a vast array of tools that assist you in governing, safeguarding, and managing your complete data estate. You will cover the capabilities of Azure resource governance.
Lessons
- Microsoft’s privacy policies and the Service Trust Portal
- Microsoft Purview’s compliance management capabilities
- The data lifecycle management and information protection features of Microsoft Purview.
- Microsoft Purview’s insider risk capabilities
- Microsoft Purview’s eDiscovery and audit capabilities
- Azure’s resource governance capabilities
- Lab: Examine the Core eDiscovery workflow
- Lab: Examine sensitivity labels in Microsoft Purview
- Lab: Examine Azure Policy
- Lab: Examine the Service Trust Portal
- Lab: Examine the Microsoft Purview compliance portal and Compliance Manager
Students who complete this module will be eligible to:
- Describe Microsoft’s privacy policies and the Service Trust Portal.
- Describe the capabilities of Microsoft Purview’s compliance management.
- Describe the data lifecycle management and information protection features of Microsoft Purview.
- Describe Microsoft Purview’s insider risk capabilities.
- Describe Microsoft Purview’s eDiscovery and audit features.
- Describe Azure’s resource governance features.
Conclusion
It’s overwhelming how vast and diverse Microsoft’s security services are. It is a company that now generates more than $10 billion annually and is expanding at a 40% annual rate. The SC-900 Microsoft certification provides you with the complete scope and its foundations. The course highlights the services that Microsoft offers through current platforms like Microsoft Azure and Microsoft 365 and demonstrates how thorough Microsoft’s security solutions are.
