Book Image

Microsoft Cybersecurity Architect Exam Ref SC-100

By : Dwayne Natwick
5 (1)
Book Image

Microsoft Cybersecurity Architect Exam Ref SC-100

5 (1)
By: Dwayne Natwick

Overview of this book

Microsoft Cybersecurity Architect Exam Ref SC-100 is a comprehensive guide that will help cybersecurity professionals design and evaluate the cybersecurity architecture of Microsoft cloud services. Complete with hands-on tutorials, projects, and self-assessment questions, you’ll have everything you need to pass the SC-100 exam. This book will take you through designing a strategy for a cybersecurity architecture and evaluating the governance, risk, and compliance (GRC) of the architecture. This will include cloud-only and hybrid infrastructures, where you’ll learn how to protect using the principles of zero trust, along with evaluating security operations and the overall security posture. To make sure that you are able to take the SC-100 exam with confidence, the last chapter of this book will let you test your knowledge with a mock exam and practice questions. By the end of this book, you’ll have the knowledge you need to plan, design, and evaluate cybersecurity for Microsoft cloud and hybrid infrastructures, and pass the SC-100 exam with flying colors.
Table of Contents (20 chapters)
1
Part 1: The Evolution of Cybersecurity in the Cloud
3
Part 2: Designing a Zero-Trust Strategy and Architecture
7
Part 3: Evaluating Governance, Risk, and Compliance (GRC) Technical Strategies and Security Operations Strategies
10
Part 4: Designing Security for Infrastructure
13
Part 5: Designing a Strategy for Data and Applications

Evaluating the security posture of cloud workloads

Microsoft Defender for Cloud provides enhanced extended detection and response (XDR) capabilities for workloads within Azure, AWS, Google, and on-premises/hybrid architectures with the various defender plans for those workloads. These capabilities, along with Microsoft 365 Defender, provide a complete XDR solution for companies to secure their IaaS, PaaS, and SaaS workloads. Let’s look at some resources that can be monitored and protected with Microsoft Defender for Cloud enhanced security Defender plans.

Defender for Server provides threat protection for Azure VMs and non-Azure servers (including server Endpoint Detection and Response (EDR)). Using hybrid infrastructure tools such as Azure Arc and Microsoft Defender for Endpoint, you can monitor and manage Azure and non-Azure servers. Non-Azure servers include those that are on-premises (or any physical or virtual server with an operating system):

  • AWS EC2 instances...