• Understand fundamental security, compliance, and identity concepts.
• Learn the principles of Zero Trust, defense-in-depth, shared responsibility, encryption, and GRC.
• Understand Microsoft Entra ID, authentication, MFA, Conditional Access, RBAC, and identity governance.
• Explore Azure security services including Azure Firewall, DDoS Protection, WAF, Key Vault, and network security controls.
• Understand Microsoft Defender for Cloud and cloud security posture management.
• Explore Microsoft Sentinel and its SIEM and SOAR capabilities.
• Understand Microsoft Defender XDR and its security solutions.
• Learn Microsoft Purview capabilities for compliance, information protection, data governance, DLP, retention, audit, and eDiscovery.
• Prepare for the Microsoft SC-900 certification exam.

Module 1: Describe Security and Compliance Concepts

• Shared responsibility model
• Defense-in-depth
• Zero Trust
• Encryption and hashing
• Governance, Risk, and Compliance (GRC)
• Identity as the primary security perimeter
• Authentication and authorization
• Identity providers
• Directory services and Active Directory
• Federation

Module 2: Describe Identity Concepts and Microsoft Entra Capabilities

• Microsoft Entra ID
• Identity types, including agent identity
• Hybrid identity
• Authentication methods
• Multifactor authentication (MFA)
• Password protection and management
• Microsoft Entra Conditional Access
• Microsoft Entra roles and RBAC
• Microsoft Entra ID Governance
• Access reviews
• Microsoft Entra Privileged Identity Management
• Microsoft Entra ID Protection

Module 3: Describe Microsoft Security Solutions

• Azure DDoS Protection
• Azure Firewall
• Azure Web Application Firewall
• Azure virtual network segmentation
• Network Security Groups
• Azure Bastion
• Azure Key Vault
• Microsoft Defender for Cloud
• Cloud Security Posture Management (CSPM)
• Cloud workload protection
• Microsoft Sentinel
• SIEM and SOAR concepts
• Microsoft Defender XDR
• Microsoft Defender for Office 365
• Microsoft Defender for Endpoint
• Microsoft Defender for Cloud Apps
• Microsoft Defender for Identity
• Microsoft Defender Vulnerability Management
• Microsoft Defender Threat Intelligence
• Microsoft Defender portal

Module 4: Describe Microsoft Compliance Solutions

• Microsoft Service Trust Portal
• Microsoft privacy principles
• Microsoft Purview portal
• Compliance Manager
• Compliance score
• Data classification
• Content Explorer
• Activity Explorer
• Sensitivity labels and policies
• Data Loss Prevention (DLP)
• Records management
• Retention policies and labels
• Insider Risk Management
• eDiscovery
• Audit solutions

1 Day

• Exploring Microsoft Entra ID capabilities
• Reviewing authentication and MFA configurations
• Exploring Conditional Access concepts
• Reviewing identity governance and access reviews
• Exploring Microsoft Defender for Cloud
• Reviewing Microsoft Sentinel capabilities
• Exploring Microsoft Defender security solutions
• Reviewing Microsoft Purview compliance capabilities
• Working with data classification and sensitivity labels
• Exploring DLP, retention, audit, and eDiscovery concepts

Certification: Microsoft Certified: Security, Compliance, and Identity Fundamentals
Exam: SC-900: Microsoft Security, Compliance, and Identity Fundamentals
Duration: 45 minutes
Format: Proctored Microsoft certification exam; interactive components may be included

• IT Professionals
• Business Stakeholders
• Security Professionals beginning with Microsoft security
• Compliance Professionals
• Identity and Access Management Professionals
• Microsoft 365 Professionals
• Azure Beginners
• Students
• Professionals preparing for SC-900 certification

• General understanding of networking and cloud computing concepts.
• General IT knowledge or experience working in an IT environment.
• Basic understanding of Microsoft Azure.
• Basic understanding of Microsoft 365.