Reviews 5,0
Reviews 5,0
SC-100 Microsoft Cybersecurity Architect
Modern security architectures are not built from individual measures, but through strategic thinking. SC-100 provides the knowledge to plan and implement holistic protection concepts for hybrid and cloud environments using Microsoft technologies.
Key topics
- Designing and implementing cybersecurity architectures with Microsoft
- Zero Trust principles and identity-centric security concepts
- Threat modeling, risk analysis, and control measures
- Governance and compliance frameworks for cloud environments
- Securing cloud workloads, endpoints, and hybrid infrastructures
Prerequisite
Solid experience with IT infrastructures, cloud platforms, and security fundamentals is required. Knowledge of Azure and Microsoft security services is expected.
Target group
IT professionals in architecture or senior security roles who are responsible for cybersecurity strategy at the enterprise level.
SC-100 establishes the conceptual foundation for a resilient security architecture – predictable, scalable, and aligned with the complexity of modern enterprise environments.
Course content
Architecture and security strategy
- Integrating interfaces and components securely into the overall architecture
- Identifying and deriving security requirements from business objectives
- Translating security goals into concrete technical controls
- Developing disaster recovery and business continuity concepts
- Designing security architecture for hybrid and multi-tenant environments
- Developing filtering and segmentation strategies for network traffic
- Assessing protocols against their security requirements
Security processes and controls
- Analyzing and assessing existing security frameworks and processes
- Designing logging and auditing strategies
- Improving security-critical processes in hybrid and multi-cloud infrastructures
- Planning and shaping SIEM concepts and security orchestration
- Optimizing and evolving operational security processes
- Assessing and improving incident response strategies
- Assessing threat intelligence sources and strategies
- Real-time monitoring and responding to detected threat data
Identity and access protection
- Securing access points in cloud environments
- Structured identity management for enterprise environments
- Concepts for secure authentication and authorization
- Implementing conditional access policies
- Role-based rights assignment and delegation
- Identity Governance as an instrument of access control
- Securing privileged accounts and access rights
- Protecting critical and sensitive system actions
- Analyzing and evaluating security protocol mechanisms
Compliance and regulatory requirements
- Analyzing compliance requirements and implementing them technically
- Assessing infrastructure security with Microsoft Defender for Cloud
- Evaluating and optimizing compliance assessment results
- Planning, configuring, and monitoring Azure policies
- Architecture concepts for data residency and data sovereignty
- Integrating data protection requirements into the security architecture
Risk assessment and control
- Metric-based analysis and assessment of security strategies
- Security posture assessment with Microsoft Defender for Cloud
- Analyzing the security posture through Secure Score evaluations
- Assessing security practices for cloud workloads
- Designing and deploying a secure Azure Landing Zone
- Evaluating threat intelligence and deriving risk mitigation measures
- Strategic recommendations for reducing identified security risks
Security architecture practices
- Developing and implementing a cross-team cybersecurity strategy
- Establishing processes for continuous improvement of security measures
- Analyzing network protocols and developing segmentation and filtering strategies
Endpoint security for servers and clients
- Defining policies for securing server and client systems
- Establishing security requirements for server operations and configuration
- Defining protective measures for mobile endpoints and client environments
- Hardening and securing Active Directory infrastructure
- Designing a management strategy for secrets, keys, and certificates
- Designing and securing remote access concepts
- Analyzing and evaluating security-relevant processes and operational procedures
- Applying forensic investigation procedures based on resource type
Security for PaaS, IaaS, and SaaS
- Developing security architecture and policies for PaaS services
- Defining protective measures and requirements for IaaS environments
- Establishing security requirements for SaaS services and usage
- Formulating and implementing IoT-specific security requirements
- Designing security architecture for data-intensive workloads
- Developing protection concepts for web-based workloads and applications
- Defining security requirements for cloud storage workloads
- Designing container security and specifying requirements
- Defining security policies for container orchestration platforms
Application security and threat modeling
- Conducting and evaluating threat modeling for applications
- Prioritizing threat mitigation measures
- Standardizing security requirements for onboarding new applications
- Developing security strategies for applications and API interfaces
Data security and encryption
- Identifying and prioritizing data threats by risk
- Developing a protection strategy for sensitive and classified data
- Defining encryption standards and requirements for data security
