Book Image

Microsoft 365 Security, Compliance, and Identity Administration

By : Peter Rising
5 (1)
Book Image

Microsoft 365 Security, Compliance, and Identity Administration

5 (1)
By: Peter Rising

Overview of this book

The Microsoft 365 Security, Compliance, and Identity Administration is designed to help you manage, implement, and monitor security and compliance solutions for Microsoft 365 environments. With this book, you’ll first configure, administer identity and access within Microsoft 365. You’ll learn about hybrid identity, authentication methods, and conditional access policies with Microsoft Intune. Next, you’ll discover how RBAC and Azure AD Identity Protection can be used to detect risks and secure information in your organization. You’ll also explore concepts such as Microsoft Defender for endpoint and identity, along with threat intelligence. As you progress, you’ll uncover additional tools and techniques to configure and manage Microsoft 365, including Azure Information Protection, Data Loss Prevention (DLP), and Microsoft Defender for Cloud Apps. By the end of this book, you’ll be well-equipped to manage and implement security measures within your Microsoft 365 suite successfully.

Related Content you might be interested in

Current Title:

Small book image
Microsoft 365 Security, Compliance, and Identity Administration
Peter Rising
Aug, 2023 | 630 pages
Small book image
Microsoft 365 Security and Compliance for Administrators
Omar Kudović | Sasha Kranjac
Mar, 2024 | 432 pages
Small book image
Microsoft Information Protection Administrator SC-400 Certification Guide
Shabaz Darr | Viktor Hedberg
Feb, 2022 | 326 pages
Small book image
Microsoft 365 Administrator MS-102 Exam Guide
Aaron Guilmette
Dec, 2023 | 534 pages
Table of Contents (25 chapters)
Preface
Preface
Who this book is for
What this book covers
Conventions used
Get in touch
Share Your Thoughts
Download a free PDF copy of this book
1
Part 1: Implementing and Managing Identity and Access
Part 1: Implementing and Managing Identity and Access
Free Chapter
2
Chapter 1: Planning for Hybrid Identity
Chapter 1: Planning for Hybrid Identity
Planning your hybrid environment
Authentication methods in Azure AD
Synchronization methods with Azure AD Connect
Azure AD Connect cloud sync
Event monitoring and troubleshooting in Azure AD Connect
Summary
Questions
Further reading
3
Chapter 2: Authentication and Security
Chapter 2: Authentication and Security
Implementing Azure AD dynamic group membership
Implementing password management
Implementing and managing external identities
Implementing and managing MFA
Planning and implementing device authentication methods
Summary
Questions
Further reading
4
Chapter 3: Implementing Conditional Access Policies
Chapter 3: Implementing Conditional Access Policies
Explaining Conditional Access
Conditional Access and Microsoft Intune
Introducing the types of Conditional Access
Monitoring Conditional Access events
Summary
Questions
Further reading
5
Chapter 4: Managing Roles and Identity Governance
Chapter 4: Managing Roles and Identity Governance
Planning and configuring PIM
Planning and configuring entitlement management
Planning and configuring access reviews
Summary
Questions
Further reading
6
Chapter 5: Azure AD Identity Protection
Chapter 5: Azure AD Identity Protection
Understanding Identity Protection
Protecting users with risk and registration policies
Configuring alert options
Managing and resolving risk events
Summary
Questions
Further reading
7
Part 2: Implementing and Managing Threat Protection
Part 2: Implementing and Managing Threat Protection
8
Chapter 6: Configuring a Microsoft Defender for Identity Solution
Chapter 6: Configuring a Microsoft Defender for Identity Solution
Identifying the organizational need for MDI
Understanding the MDI architecture
Setting up MDI
Managing and monitoring MDI
Summary
Questions
Further reading
9
Chapter 7: Configuring Device Threat Protection with Microsoft Defender for Endpoint and Intune
Chapter 7: Configuring Device Threat Protection with Microsoft Defender for Endpoint and Intune
Planning and implementing MDE
Managing and monitoring MDE
Implementing Microsoft Defender Application Guard, Application Control, and exploit protection
Encrypting your Windows devices using BitLocker
Implementing application protection policies
Summary
Questions
Further reading
10
Chapter 8: Configuring Microsoft Defender for Office 365
Chapter 8: Configuring Microsoft Defender for Office 365
Protecting users and domains with anti-phishing protection and policies
Configuring Safe Attachments options and policies
Configuring Safe Links options, blocked URLs, and policies
Monitoring and remediating with Microsoft Defender for Office 365 reports
Running simulated attacks with Microsoft Defender for Office 365
Further attack simulation configuration options
Summary
Questions
Further reading
11
Chapter 9: Using Microsoft Sentinel to Monitor Microsoft 365 Security
Chapter 9: Using Microsoft Sentinel to Monitor Microsoft 365 Security
Planning and configuring Microsoft Sentinel
Configuring playbooks in Microsoft Sentinel
Creating and using automation rules to manage responses
Managing and monitoring your Microsoft Sentinel instance
Summary
Questions
Further reading
12
Chapter 10: Configuring Microsoft Defender for Cloud Apps
Chapter 10: Configuring Microsoft Defender for Cloud Apps
Planning your MDA implementation
Configuring MDA
Managing Cloud App Discovery
Managing the MDA catalog
Managing apps and app connectors in MDA
Configuring policies and templates
Using Conditional Access App Control with MDA
Reviewing and interpreting alerts, reports, and dashboards
Summary
Questions
Further reading
13
Part 3: Implementing and Managing Information Protection
Part 3: Implementing and Managing Information Protection
14
Chapter 11: Managing Sensitive Information
Chapter 11: Managing Sensitive Information
Planning a sensitivity label solution for your organization
Creating and managing SITs
Setting up sensitivity labels and policies
Configuring and using Activity explorer
Using sensitivity labels with Teams, SharePoint, OneDrive, and Office apps
Summary
Questions
Further reading
15
Chapter 12: Managing Microsoft Purview Data Loss Prevention
Chapter 12: Managing Microsoft Purview Data Loss Prevention
Planning and implementing DLP
Managing DLP policies for Microsoft 365 workloads
DLP reporting and alerting capabilities
Implementing Endpoint DLP
Summary
Questions
Further reading
16
Chapter 13: Managing Microsoft Purview Data Lifecycle Management
Chapter 13: Managing Microsoft Purview Data Lifecycle Management
Planning for data lifecycle management
Analyzing reports and dashboards
Configuring retention labels and policies
Creating a retention policy
Planning and implementing adaptive scopes
Finding and recovering deleted Microsoft 365 data
Summary
Questions
Further reading
17
Part 4: Managing Compliance Features in Microsoft 365
Part 4: Managing Compliance Features in Microsoft 365
18
Chapter 14: Monitoring and Analyzing Audit Logs and Reports in Microsoft Purview
Chapter 14: Monitoring and Analyzing Audit Logs and Reports in Microsoft Purview
Planning for auditing and reporting
Investigating compliance activities by using audit logs
Reviewing and interpreting compliance reports and dashboards
Configuring alert policies
Configuring audit log retention policies
Summary
Questions
Further reading
19
Chapter 15: Planning For, Conducting, and Managing eDiscovery Cases
Chapter 15: Planning For, Conducting, and Managing eDiscovery Cases
Recommending eDiscovery (Standard) or eDiscovery (Premium)
Planning for content searches and eDiscovery
Delegating the required permissions to use search and discovery tools
Creating eDiscovery cases
Managing eDiscovery cases
Summary
Questions
Further reading
20
Chapter 16: Managing Regulatory and Privacy Requirements
Chapter 16: Managing Regulatory and Privacy Requirements
Planning your regulatory compliance journey in Microsoft 365
Managing regulatory compliance in Microsoft Purview Compliance Manager
Exploring Microsoft Priva
Summary
Questions
Further reading
21
Chapter 17: Managing Insider Risk Solutions in Microsoft 365
Chapter 17: Managing Insider Risk Solutions in Microsoft 365
Implementing Customer Lockbox
Implementing and managing Communication Compliance policies
Implementing and managing insider risk management policies
Implementing and managing Information Barriers policies
Implementing and managing Privileged Access Management
Summary
Questions
Further reading
22
Answers
Chapter 1
Chapter 2
Chapter 3
Chapter 4
Chapter 5
Chapter 6
Chapter 7
Chapter 8
Chapter 9
Chapter 10
Chapter 11
Chapter 12
Chapter 13
Chapter 14
Chapter 15
Chapter 16
Chapter 17
23
Index
Index
Why subscribe?
24
Other Books You May Enjoy
Other Books You May Enjoy
Packt is searching for authors like you
Share Your Thoughts
Download a free PDF copy of this book

Monitoring Conditional Access events

As a security admin, an important part of your job will be to monitor and interpret any events that are recorded in relation to Conditional Access to ensure that it is doing its job correctly. In order to monitor and search for Conditional Access policy matches in Azure AD, you need to take the following steps:

  1. From the Azure portal, select Azure Active Directory and choose Sign-in logs from the Monitoring section:

Figure 3.28: Monitoring Conditional Access

Figure 3.28: Monitoring Conditional Access

  1. From the results displayed, filter by Conditional access:

Figure 3.29: Filtering by Conditional access

Figure 3.29: Filtering by Conditional access

  1. You can further filter the results by Success, Failure, or Not Applied:

Figure 3.30: Filtering results

Figure 3.30: Filtering results

Note

You can also monitor the device compliance status from the Microsoft Intune admin center by selecting Compliance status from the Devices | Overview...

Previous Section
End of Section 5
Next Section