Skip to content
Certification Guides

MCE Microsoft Certified Expert Cybersecurity Architect Study Guide: Exam SC-100 (2023)

Gain a competitive edge with MCE Microsoft Certified Expert Cybersecurity Architect Study Guide: Exam SC-100 (2023), featuring real certification questions from past exams.

Preview 16 of 730 pages

See the first 16 pages exactly as they appear in the document.

  1. Page 1
  2. Page 2
  3. Page 3
    Read page 3 as text

    Table of Contents Cover Title Page Copyright Dedication Acknowledgments About the Authors About the Technical Editor Introduction What Is Azure? About the SC-100 Certification Exam Why Become a Certified Microsoft Azure Cybersecurity Architect? Preparing to Become a Certified Microsoft Cybersecurity Architect How to Become a Certified Microsoft Cybersecurity Architect Who Should Buy This Book How This Book Is Organized Bonus Digital Contents Conventions Used in This Book Using This Book SC-100 Exam Objectives How to Contact the Publisher Assessment Test Answers to Assessment Test Chapter 1: Define and Implement an Overall Security Strategy and Architecture Basics of Cloud Computing

  4. Page 4
    Read page 4 as text

    Introduction to Cybersecurity Cybersecurity Domains Getting Started with Zero Trust Design Integration Points in an Architecture Design Security Needs to Be Based on Business Goals Decode Security Requirements to Technical Abilities Design Security for a Resiliency Approach Identify the Security Risks Associated with Hybrid and Multi- Tenant Environments Plan Traffic Filtering and Segmentation Technical and Governance Strategies Summary Exam Essentials Review Questions Chapter 2: Define a Security Operations Strategy Foundation of Security Operations and Strategy Design a Logging and Auditing Strategy to Support Security Operations Develop Security Operations to Support a Hybrid or Multi- Cloud Environment Design a Strategy for SIEM and SOAR Evaluate Security Workflows Evaluate a Security Operations Strategy for the Incident Management Life Cycle Evaluate a Security Operations Strategy for Sharing Technical Threat Intelligence Summary Exam Essentials Review Questions Chapter 3: Define an Identity Security Strategy Design a Strategy for Access to Cloud Resources

  5. Page 5
    Read page 5 as text

    Recommend an Identity Store (Tenants, B2B, B2C, Hybrid) Recommend an Authentication and Authorization Strategy Design a Strategy for Conditional Access Design a Strategy for Role Assignment and Delegation Design a Security Strategy for Privileged Role Access to Infrastructure Including Identity-Based Firewall Rules and Azure PIM Design a Security Strategy for Privileged Activities Including PAM, Entitlement Management, and Cloud Tenant Administration Summary Exam Essentials Review Questions Chapter 4: Identify a Regulatory Compliance Strategy Interpret Compliance Requirements and Translate into Specific Technical Capabilities Evaluate Infrastructure Compliance by Using Microsoft Defender for Cloud Interpret Compliance Scores and Recommend Actions to Resolve Issues or Improve Security Design and Validate Implementation of Azure Policy Design for Data Residency Requirements Translate Privacy Requirements into Requirements for Security Solutions Summary Exam Essentials Review Questions Chapter 5: Identify Security Posture and Recommend Technical Strategies to Manage Risk Analyze Security Posture by Using Azure Security Benchmark Analyze Security Posture by Using Microsoft Defender for

  6. Page 6
    Read page 6 as text

    Cloud Assess the Security Hygiene of Cloud Workloads Evaluate the Security Posture of Cloud Workloads Design Security for an Azure Landing Zone Evaluate Security Postures by Using Secure Scores Identify Technical Threats and Recommend Mitigation Measures Recommend Security Capabilities or Controls to Mitigate Identified Risks Summary Exam Essentials Review Questions Chapter 6: Define a Strategy for Securing Infrastructure Plan and Deploy a Security Strategy Across Teams Deploy a Process for Proactive and Continuous Evolution of a Security Strategy Specify Security Baselines for Server and Client Endpoints Specify Security Baselines for the Server, Including Multiple Platforms and Operating Systems Specify Security Requirements for Mobile Devices and Clients, Including Endpoint Protection, Hardening, and Configuration Specify Requirements for Securing Active Directory Domain Services Design a Strategy to Manage Secrets, Keys, and Certificates Design a Strategy for Secure Remote Access Design a Strategy for Securing Privileged Access Summary Exam Essentials Review Questions Chapter 7: Define a Strategy and Requirements for Securing PaaS,

  7. Page 7
    Read page 7 as text

    IaaS, and SaaS Services Establish Security Baselines for SaaS, PaaS, and IaaS Services Establish Security Requirements for IoT Workloads Establish Security Requirements for Data Workloads, Including SQL Server, Azure SQL, Azure Synapse, and Azure Cosmos DB Define the Security Requirements for Web Workloads Determine the Security Requirements for Storage Workloads Define Container Security Requirements Define Container Orchestration Security Requirements Summary Exam Essentials Review Questions Chapter 8: Define a Strategy and Requirements for Applications and Data Knowing the Application Threat Intelligence Model Specify Priorities for Mitigating Threats to Applications Specify a Security Standard for Onboarding a New Application Specify a Security Strategy for Applications and APIs Specify Priorities for Mitigating Threats to Data Design a Strategy to Identify and Protect Sensitive Data Specify an Encryption Standard for Data at Rest and in Motion Summary Exam Essentials Review Questions Chapter 9: Recommend Security Best Practices and Priorities Recommend Best Practices for Cybersecurity Capabilities and Controls Recommend Best Practices for Protecting from Insider and

  8. Page 8
    Read page 8 as text

    External Attacks Recommend Best Practices for Zero Trust Security Recommend Best Practices for Zero Trust Rapid Modernization Plan Recommend a DevSecOps Process Recommend a Methodology for Asset Protection Recommend Strategies for Managing and Minimizing Risk Plan for Ransomware Protection and Extortion-Based Attacks Protect Assets from Ransomware Attacks Recommend Microsoft Ransomware Best Practices Summary Exam Essentials Review Questions Appendix: Answers to Review Questions Chapter 1: Define and Implement an Overall Security Strategy and Architecture Chapter 2: Define a Security Operations Strategy Chapter 3: Define an Identity Security Strategy Chapter 4: Identify a Regulatory Compliance Strategy Chapter 5: Identify Security Posture and Recommend Technical Strategies to Manage Risk Chapter 6: Define a Strategy for Securing Infrastructure Chapter 7: Define a Strategy and Requirements for Securing PaaS, IaaS, and SaaS Services Chapter 8: Define a Strategy and Requirements for Applications and Data Chapter 9: Recommend Security Best Practices and Priorities Index End User License Agreement

  9. Page 9
    Read page 9 as text

    List of Tables Chapter 2 TABLE 2.1 Azure Logs TABLE 2.2 Security Logs Chapter 3 TABLE 3.1 Authentication Methods TABLE 3.2 Personas Chapter 4 TABLE 4.1 Azure Compliance TABLE 4.2 Operational compliance problems and solutions TABLE 4.3 Azure Policy Glossary TABLE 4.4 Azure Policy's configuration maximum Chapter 6 TABLE 6.1 Sample Metrics TABLE 6.2 Best Practices TABLE 6.3 Benefits Chapter 7 TABLE 7.1 Azure Cloud Services and Azure Security Benchmark TABLE 7.2 App Service Mapping to the Microsoft Cloud Security Benchmark TABLE 7.3 Microsoft Windows Virtual Machine Mapping TABLE 7.4 Roles and Security Requirements TABLE 7.5 Steps to Identify Data Chapter 8 TABLE 8.1 Questions to Ask

  10. Page 10
    Read page 10 as text

    TABLE 8.2 Microsoft Threat Modeling Tool Mitigations TABLE 8.3 Risky Applications TABLE 8.4 DevOps Phases and Tasks TABLE 8.5 Security Strategy Components TABLE 8.6 Method to Protect Data TABLE 8.7 Data Classification TABLE 8.8 Purview Capabilities TABLE 8.9 Data Protection Capabilities TABLE 8.10 Purview Data Life-Cycle Management Capabilities TABLE 8.11 Records Management Chapter 9 TABLE 9.1 Microsoft Azure Security Benchmark Key bestpratices across various... TABLE 9.2 Microsoft Security benchmark for Incident response and logging per... TABLE 9.3 Best Practices for Identity Management, Privileged Access, and Net... TABLE 9.4 Protecting Against Ransomware TABLE 9.5 Securing Your Backup Infrastructure TABLE 9.6 Protecting from Ransomware TABLE 9.7 Protecting Organization Data TABLE 9.8 Privileged Access Perspective TABLE 9.9 Deployment Checklist TABLE 9.10 Detection and Response Time Perspective TABLE 9.11 Deployment Checklist TABLE 9.12 Remote Access Perspective

  11. Page 11
    Read page 11 as text

    TABLE 9.13 Deployment Checklist TABLE 9.14 Email and Collaboration Perspective TABLE 9.15 Deployment Checklist TABLE 9.16 Endpoints Perspective TABLE 9.17 Deployment Checklist TABLE 9.18 Accounts Perspective TABLE 9.19 Deployment Checklist List of Illustrations Chapter 1 FIGURE 1.1 Microsoft Zero Trust architecture FIGURE 1.2 High-level Microsoft Cybersecurity Reference Architecture FIGURE 1.3 High-level Microsoft Cybersecurity Reference Architecture SOC bui... FIGURE 1.4 High-level Microsoft Cybersecurity Reference Architecture SaaS bu... FIGURE 1.5 High-level Microsoft Cybersecurity Reference Architecture Hybrid ... FIGURE 1.6 High-level Microsoft Cybersecurity Reference Architecture Endpoin... FIGURE 1.7 High-level Microsoft Cybersecurity Reference Architecture Informa... FIGURE 1.8 High-level Microsoft Cybersecurity Reference Architecture Identit... FIGURE 1.9 High-level Microsoft Cybersecurity Reference Architecture People ... FIGURE 1.10 High-level Microsoft Cybersecurity Reference Architecture IOT an...

  12. Page 12
    Read page 12 as text

    FIGURE 1.11 Microsoft Cloud Adoption Framework FIGURE 1.12 Cybersecurity business alignment and disciplines FIGURE 1.13 Security resiliency managing risk FIGURE 1.14 Hybrid security identity environment FIGURE 1.15 Deploying a secure hybrid network Chapter 2 FIGURE 2.1 SOC operating model FIGURE 2.2 Microsoft unified operations FIGURE 2.3 References architecture for Microsoft Sentinel and Defender for C... Chapter 3 FIGURE 3.1 Enterprise access solution based on Zero Trust FIGURE 3.2 Microsoft identity governance method to manage identities and acc... FIGURE 3.3 Microsoft Azure AD password hash synchronization reference archit... FIGURE 3.4 Microsoft Azure AD pass-through authentication reference architec... FIGURE 3.5 Microsoft federated authentication reference architecture FIGURE 3.6 Microsoft authentication method decision tree FIGURE 3.7 Microsoft recommends end-to-end security. Chapter 4 FIGURE 4.1 Microsoft's five cybersecurity disciplines of cloud governance FIGURE 4.2 Microsoft Defender for Cloud FIGURE 4.3 Azure policy logical view

  13. Page 13
    Read page 13 as text

    Chapter 5 FIGURE 5.1 Overall security governance FIGURE 5.2 Security posture management rapid modernization plan FIGURE 5.3 Security posture management pillars FIGURE 5.4 Microsoft Defender for Cloud regulatory compliance FIGURE 5.5 Microsoft Defender for Cloud Dashboard FIGURE 5.6 Security hygiene recommendation remediation FIGURE 5.7 Security hygiene remediation workflow FIGURE 5.8 Microsoft Defender for Cloud—security hygiene of workloads FIGURE 5.9 Microsoft Defender for Cloud Score dashboard FIGURE 5.10 Microsoft Defender for Cloud recommendation dashboard FIGURE 5.11 Building block CTI in SIEM FIGURE 5.12 Azure AD Identity Protection risk detection FIGURE 5.13 Risk management framework FIGURE 5.14 Security control secure management dashboard FIGURE 5.15 Security encrypt data in transit dashboard Chapter 6 FIGURE 6.1 Microsoft-defined security roles and responsibilities FIGURE 6.2 Microsoft approach to continuous assessment FIGURE 6.3 Microsoft Defender for Cloud ASB OSB baseline for Windows and Lin... FIGURE 6.4 Detailed view about remediation FIGURE 6.5 Microsoft approach to continuous assessment

  14. Page 14
    Read page 14 as text

    FIGURE 6.6 Microsoft Defender for Identity with AD FS FIGURE 6.7 Microsoft Certified Authority integrated FIGURE 6.8 Microsoft Certified Authority and Key Vault integrated FIGURE 6.9 Site-to-site VPN FIGURE 6.10 Microsoft Azure multisite S2S VPN FIGURE 6.11 Point-to-site VPN FIGURE 6.12 Microsoft Azure connectivity FIGURE 6.13 Microsoft Azure Remote connectivity FIGURE 6.14 Microsoft Azure privileged access security strategy guideline Chapter 7 FIGURE 7.1 Microsoft Defender for IoT FIGURE 7.2 Security best practices FIGURE 7.3 Security posture management for data FIGURE 7.4 Microsoft Defender for Azure SQL database servers FIGURE 7.5 Security recommendations for SQL databases FIGURE 7.6 Defender for Storage two-action view FIGURE 7.7 Microsoft Defender for Containers FIGURE 7.8 Azure Kubernetes Service clusters Chapter 9 FIGURE 9.1 Microsoft Cybersecurity Reference Architecture FIGURE 9.2 Prepare-enter-traverse-execute FIGURE 9.3 Technical-oriented program

  15. Page 15
    Read page 15 as text

    MCE Microsoft ® Certified Expert Cybersecurity Architect Study Guide Exam SC-100 Kathiravan Udayakumar Puthiyavan Udayakumar

  16. Page 16

714 more pages in the full document

Unlock it once and it stays in your library, ready to chat with or turn into flashcards.

Unlock the full document

More Azure Networking Practice Exam study materials

See all

Study this document with CramX

Once it is in your library, every tool can work from it.