Duration
4 days
Course Description
This is an advanced, expert-level course. Although not required to attend, students are strongly encouraged to have taken and passed another associate level certification in the security, compliance and identity portfolio (such as AZ-500, SC-200 or SC-300) before attending this class. This course prepares students with the expertise to design and evaluate cybersecurity strategies in the following areas: Zero Trust, Governance Risk Compliance (GRC), security operations (SecOps), and data and applications. Students will also learn how to design and architect solutions using zero trust principles and specify security requirements for cloud infrastructure in different service models (SaaS, PaaS, IaaS).
Audience profile
This course is for experienced cloud security engineers who have taken a previous certification in the security, compliance and identity portfolio. Specifically, students should have advanced experience and knowledge in a wide range of security engineering areas, including identity and access, platform protection, security operations, securing data, and securing applications. They should also have experience with hybrid and cloud implementations. Beginning students should instead take the course SC-900: Microsoft Security, Compliance, and Identity Fundamentals.
Job role: Solution Architect
Preparation for exam: SC-100
Skills gained
- Design a Zero Trust strategy and architecture
- Evaluate Governance Risk Compliance (GRC) technical strategies and security operations strategies
- Design security for infrastructure
- Design a strategy for data and applications
Prerequisites
- Advanced experience and knowledge in identity and access, platform protection, security operations, securing data and securing applications.
- Experience with hybrid and cloud implementation
Day 1
9:00am - 10:30am
- Introduction to Zero Trust and best practice frameworks
- Design solutions that align with the Cloud Adoption Framework (CAF) and Well-Architected Framework (WAF)
10:30am - 10:45am Morning Break
10:45am - 12:30pm
- Design solutions that align with the Microsoft Cybersecurity Reference Architecture (MCRA) and Microsoft cloud security benchmark (MCSB)
12:30pm - 1:30pm Lunch Break
1:30pm - 3:30pm
- Design a resiliency strategy for common cyberthreats like ransomware
3:30pm - 3:45pm Afternoon Break
3:45pm - 5:00pm
- Case study: Design solutions that align with security best practices and priorities
Day 2
9:00am - 10:30am
- Design solutions for regulatory compliance
10:30am - 10:45am Morning Break
10:45am - 12:30pm
- Design solutions for identity and access management
12:30pm - 1:30pm Lunch Break
1:30pm - 3:30pm
- Design solutions for securing privileged access
3:30pm - 3:45pm Afternoon Break
3:45pm - 5:00pm
- Design solutions for security operations
- Case study: Design security operations, identity and compliance capabilities
Day 3
9:00am - 10:30am
- Design solutions for securing Microsoft 365
10:30am - 10:45am Morning Break
10:45am - 12:30pm
- Design solutions for securing applications
12:30pm - 1:30pm Lunch Break
1:30pm - 3:30pm
- Design solutions for securing an organization's data
3:30pm - 3:45pm Afternoon Break
3:45pm - 5:00pm
- Case study: Design security solutions for applications and data
Day 4
9:00am - 10:30am
- Specify requirements for securing SaaS, PaaS, and IaaS services
10:30am - 10:45am Morning Break
10:45am - 12:30pm
- Design solutions for security posture management in hybrid and multicloud environments
12:30pm - 1:30pm Lunch Break
1:30pm - 3:30pm
- Design solutions for securing server and client endpoints
- Design solutions for network security
3:30pm - 3:45pm Afternoon Break
3:45pm - 5:00pm
- Case study: Design security solutions for infrastructure
Programme scope, delivery arrangements and suitability are confirmed during enquiry.