Microsoft Cybersecurity Architect

Overview

This SC-100T00: Microsoft Cybersecurity Architect course prepares students with the expertise to design and evaluate cybersecurity strategies in the following areas: Zero Trust, Governance Risk Compliance (GRC), security operations (SecOps), and data and applications. Students will also learn how to design and architect solutions using zero trust principles and specify security requirements for cloud infrastructure in different service models (SaaS, PaaS, IaaS).

Students will also learn how to design and architect solutions using zero trust principles and specify security requirements for cloud infrastructure in different service models (SaaS, PaaS, IaaS).

Microsoft Cybersecurity Architect role definition

Both the certification exam and the courseware are based on the Microsoft Cybersecurity Architect role.

The Microsoft Cybersecurity Architect has subject matter expertise in designing and evolving cybersecurity solutions that protect an organization’s mission and business processes across all aspects of the enterprise architecture. Responsibilities include designing reference models, integrating security into architectures, designing security architectures, and ensuring the resiliency of the organization.

The Cybersecurity Architect gathers the client’s business and security requirements, selects appropriate security capabilities, and translates the requirements into architectural specifications that minimize risk, meet compliance and privacy requirements, adhere to best practices, and ensure appropriate levels of confidentiality, integrity, availability, and safety for critical business assets. The Cybersecurity Architect ensures successful deployments and the ongoing technical viability of solutions through assessments and reviews of the security posture.

The Cybersecurity Architect continuously collaborates with Security Engineers, Security Operations Analysts, Identity and Access Management Admins, Information Protection Admins, Cloud Security (Azure/M365) Administrator/Engineers, privacy officers, governance, compliance, and risk roles, and solution providers to plan and implement a cybersecurity strategy that meets the business needs of an organization.

The Cybersecurity Architect must be familiar with Microsoft security and identity technologies, hybrid cloud and workload security configurations, and cloud application development solutions. The Cybersecurity Architect must have skills and experience in applying cybersecurity concepts and practices, information security, application security, incident response and recovery techniques, and security standards, policies, and governance frameworks.

Prerequisites

Before attending this course, students must have:

• Advanced experience and knowledge in identity and access, platform protection, security operations, securing data and securing applications
• Experience with hybrid and cloud implementations.

This is an advanced, expert-level course. Although not required to attend, students are strongly encouraged to have taken and passed another associate level certification in the security, compliance and identity portfolio such as the following before attending this class:

• AZ-500T00: Secure Cloud Resources with Microsoft Security Technologies
• SC-200T00: Defend against Cyberthreats with Microsoft’s Security Operations Platform
• SC-300T00: Microsoft Identity and Access Administrator

Target Audience

This course is for experienced cloud security engineers who have taken a previous certification in the security, compliance, and identity portfolio. Specifically, students should have advanced experience and knowledge in a wide range of security engineering areas, including identity and access, platform protection, security operations, securing data, and securing applications.

They should also have experience with hybrid and cloud implementations. Beginning students should instead take the course SC-900: Microsoft Security, Compliance, and Identity Fundamentals.

Module 1: Design solutions that align with security best practices and priorities

You learn how to use critical Microsoft security best practices to improve an organizations security posture, apply Zero Trust principles, and minimize risk from emerging attacks. Frameworks discussed include the Cloud Adoption Framework (CAF), Well-Architected Framework (WAF), and Microsoft Cybersecurity Reference Architecture (MCRA).

• Introduction to Zero Trust and best practice frameworks
• Design security solutions that align with the Cloud Adoption Framework (CAF) and Well-Architected Framework (WAF)
• Design solutions that align with the Microsoft Cybersecurity Reference Architecture (MCRA) and Microsoft cloud security benchmark (MCSB)
• Design a resiliency strategy for ransomware and other attacks based on Microsoft Security Best Practices

Module 2: Design security operations, identity, and compliance capabilities

You learn how to design solutions for security operations (SecOps), identity & access management, privileged access, and regulatory compliance.

• Design solutions for regulatory compliance
• Design solutions for identity and access management
• Design solutions for securing privileged access
• Design solutions for security operations
• Interactive case study: Modernizing identity and data security
• Interactive case study: Modernizing user access control and threat resilience

Module 3: Design security solutions for applications and data

Learn how to design solutions to secure data and applications, including: Microsoft 365, application development, existing application portfolios, data discovery, and classification with Microsoft Purview and data security for Azure workloads.

• Evaluate solutions for securing Microsoft 365
• Design solutions for securing applications
• Design solutions for securing an organization’s data
• Interactive case study: Securing apps and data

Module 4: Design security solutions for infrastructure

You learn how to design solutions for infrastructure security. These infrastructure solutions include specifying requirements for different cloud models, designing solutions for posture management in hybrid and multicloud environments, and securing endpoints.

Certification Exam

Study Area

Percentage

Design solutions that align with security best practices and priorities

22%

Design security operations, identity, and compliance capabilities

37%

Design security solutions for infrastructure

25%

Design security solutions for applications and data

25%

Programme scope, delivery arrangements and suitability are confirmed during enquiry.