Overview
Microsoft has just released four new security exams and certifications, which are fantastic news for anyone working in the security field.
Most of us are affected by new business issues as we adapt to an operating paradigm working from home. It has become the "new normal," and firms worldwide are under pressure to expedite their digital transformation, making security a more critical concern than ever.
Background
The Microsoft Cloud Technology Security certifications used to be as follows:
Microsoft 365 Security Administrator Associate (MS-500) certification covers the following topics:
- Compliance Discovery
- Endpoint Manager for DLP
- Windows Defender is a program that protects your computer ATP
- On-Premise Connectivity and Security with Azure ATP Conditional Access
Associate Microsoft Azure Security Engineer (AZ-500)
The following major topics are covered:
- VPN for Network Security
- Backup or Restore for Network Security
- Azure Firewall is a service provided by Microsoft.
- Security Database for Azure
- Bastion Containers Security
- Identity Security
Those are all important topics, yet there were a few reservations:
A single certification that covers all security-related components of Microsoft 365 or Azure in depth is a tall order:
A few things to keep in mind:
- It's not the best place for non-technical people to learn about technology.
- In just three days, you'll learn about 14 different security technologies!
- It's an excellent way to understand all current security products and technologies, but it's not very in-depth due to the many technologies covered.
- Administrators will find it helpful, while architects will find it lacking depth.
What's Brand New
We now have four more in-depth and more focused Microsoft Security training and certification tracks on our hands.
- Fundamentals of Microsoft Security, Compliance, and Identity Management (SC-900)
- SC-200 Analyst for Microsoft Security Operations
- SC-300 Microsoft Information Protection Administrator
- SC-40 Microsoft Information Protection Administrator
Fundamentals of Microsoft Security, Compliance, and Identity (SC-900)
Introduction
This one-day training and certification track provides a thorough overview of all Microsoft 365 and Azure security and compliance features. After completing this course, you'll be able to identify essential technologies that offer identity and service security and comprehend basic compliance concepts for Microsoft 365 and Azure products.
The topics covered are as follows:
- Describe the methods and concepts used in the security field.
- The security perimeters are the Microsoft Service Trust Portal and Microsoft's Identity service principles. Who does intelligence safeguard your identity, what is Azure AD, and what technologies are available to audit and protect Multi-Factor and Conditional Access?
- Privileged Identity Management: An Overview (PIM)
- Password Spray, Tor, and an Anonymous VPN! How may Azure AD Identity Protection be used to mitigate the problem?
- Recognize Azure's security options: NSGs, Azure Firewall, Web Application Firewall, and Azure Bastion are all examples of network security groups.
- Introduce Azure Security Center and clarify SIEM, SOR, and XDR.
- What is Azure Sentinel, and why should you care about it?
- Differences between Microsoft Defender for Endpoint Protection and Microsoft Defender for Identity?
- An introduction to MDM and MAM with Endpoint Manager (Intune)
- What is data loss prevention (DLP), electronic discovery (eDiscovery), and what tools can enable sophisticated auditing and application security for cloud apps?
- Insider risk management: an introduction
Cover the many of these topics in the MS-500, but the new SC-900. It provides an overview of each technology on a technical and a sales level.
This program is suitable for:
- On a high level, sales and management want an understanding of available technologies and cases.
- Beginners who want to learn about the security and compliance capabilities in Microsoft 365 and Azure
- Administrators of Microsoft 365 who need an overview of Azure security features and an introduction
- Administrators who require a quick overview and introduction to the security aspects of Microsoft 365
- MS-900 and AZ-900 certified delegates
Microsoft Security Operations Analyst (SC-200)
Introduction
This three-day training and certification program focuses on the skills needed to do log analysis, threat hunting, and incident response using Microsoft technologies. It also includes an introduction to the Kusto Query Language and all of the abilities needed to develop endpoint and network protection.
The topics covered are as follows:
- Defender for Office 365 detects, investigates, responds to, and remediates attacks in SharePoint, OneDrive, Teams, and corporate email.
- Manage the Security notifications from DLP
- Evaluate and recommend insider risk policies and sensitivity labels.
- In Microsoft Defender for Endpoints, you may control data retention, alert notifications, and other advanced features.
- In Microsoft Defender for Endpoints, you may set up device surface reduction rules and customize warnings.
- Configure Microsoft Defender for Endpoint to run vulnerability scans on your computers.
- With Windows Defender for Identity, you can use advanced threat analytics and manage threat indicators.
- Threats involving Azure AD, conditional access, Azure AD Domain Services, Azure AD Identity Protection, and PIM are detected, investigated, responded to, and remedied.
- Using Cloud App Security to set up sophisticated auditing and security features
- Make a Sentinel workspace and configure it.
- For researching sources with Azure Sentinel, plan, implement, and use data connectors.
- Analytics rules from Sentinel
- Sentinel's security orchestration and automation
- Sentinel can help you manage incidents.
- With Sentinel, you may use workbooks.
- Sentinel is used to detecting advanced threats.
This course covers threat detection, incident response, security automation, and the implementation of the hottest SIEM on the market:
Microsoft 365 Defender, Azure Defender, and Sentinel are the technologies covered by this certification. It demonstrates how to use the technologies above to develop advanced audits for Azure, AWS, and Google services. You'll learn how to put the technologies into practice and get a crash course in programming to build your dashboard, analytic queries, and automated answers.
It is the class for you if you want to learn about:
- Administrators with experience in Azure and Microsoft 365 who are excited to build and manage Sentinel and advanced security operations technologies
- Architects of Safety
- Network operations, security analysts, and incident responders
- Security analysts have worked with another SIEM system and want to learn what Microsoft offers.
SC-300 (Microsoft Identity and Access Administrator)
Introduction
This 3-day training and certification track focuses on the skills needed to administer, audit, and secure apps and identities in both a cloud-only and hybrid Microsoft 365 and Azure environment. Internal, external, and hybrid identities will be managed and secured. You'll also learn about cloud and hybrid MFA and advanced authentication principles. Discuss the Onboarding and securing on-premise Active Directory and deploying advanced authentication scenarios including PTA, SSO, and ADFS. Finally, we'll look at the publishing and auditing of cloud and hybrid apps, including their design and implementation.
The topics covered are as follows:
- In Azure AD, you can create roles, custom domains, register devices, and manage administrative units.
- Users, groups, and licenses create and collected here.
- In Azure Active Directory, you may control external collaboration settings and user accounts.
- Azure AD Connect can help you implement hybrid identities.
- With ADFS, you can use PHS, PTA, and SSO.
- Use MFA, MFA Server, and Windows Hello for Business to plan and execute enhanced authentication.
- Use advanced conditional access and Azure Active Directory Identity Protection to secure identities.
- Azure Application Proxy allows you to publish and secure apps.
- Use catalogs, access packages, and conditions of use to plan and implement entitlement and management.
- Using Privileged Identity Management (PIM) and Access Reviews, define and implement a security plan.
- Azure Log Analytics can be used to analyze Azure AD activity.
Link these topics to secure and maintain identities, connect on-premise systems, and manage cloud and hybrid programs.
Microsoft Azure AD, Azure AD Connect, Privileged Identity Management, Conditional Access, Azure Application Proxy, MFA Server, and Azure Log Analytics are among the technologies covered by this certification.
You'll learn how to use Azure Active Directory and on-premise Active Directory to manage and safeguard identities. You'll also learn how to design and execute hybrid identity synchronization and advanced authentication scenarios, including PHS, PTA, and ADFS. Advanced authorization and auditing ideas and how to publish and secure hybrid apps utilizing the Application Proxy cover this certification.
It is the class for you if you want to learn about:
- Experienced Azure and Microsoft 365 administrators who want to learn about the latest features for securing identities and apps
- Administrators who want to plan and implement identity synchronization with an on-premise active directory
- Administrators are interested in learning more about the opportunities for auditing and ensuring identity compliance in Azure AD.
- MS-100 and MS-101 certified delegates
SC-400 -Microsoft Information Protection Administrator
introduction
This two-day training and certification course covers all essential technologies for ensuring compliance and security for Microsoft 365 applications and data. You'll learn how to create archiving strategies, safeguard data at rest with DLP and eDiscovery, protect data in transit with DLP, and onboard clients to ensure data compliance.
The following takes into account:
- Types of sensitive data should be created and managed.
- Create and administer a trainable classification system.
- Put sensitivity labels in place and maintain them.
- Advanced data loss prevention rules can be created and configured (DLP)
- Cloud App Security protects corporate applications and data.
- Use the Microsoft Information Protection
- Track the file access and user behavior
- Labels and policies for archiving data are created and configured.
- Recover the Content in Teams, SharePoint, Exchange, and OneDrive
- Records Management should be installed and set up.
eDiscovery, DLP, Sensitive Information Types, Data Classifiers, and Azure Information Protection are among the technologies covered by this certification.
In this training, you'll learn how to use Microsoft 365's latest security and auditing capabilities. You'll also learn about the latest data security technologies and analysis methodologies for eDiscovery searches and how to employ tools to detect insider threats.
It is the class for you if you want to learn about:
- Administrators who have worked with Azure and Microsoft 365 before and want to learn about the latest security and compliance tools
- Those in charge of designing and implementing archiving and compliance tools
- Auditors and administrators for Microsoft 365
- MS-500 and MS-101 certified delegates
Conclusion
You can learn everything about Microsoft security classes right here. If you require additional information, please get in touch with Netcom Learning. You may get an overview of the courses and some basic information.