SC-100: Microsoft Cybersecurity Architect

This module introduces the foundational security frameworks, including Zero Trust and Microsoft’s best practice frameworks, to help you build security strategies that align with modern organisational needs. You’ll explore how these frameworks address today’s security challenges.

• Understand the Zero Trust strategy and architecture and its principles for identity, device, and network security.
• Learn how to apply the Microsoft Cloud Adoption Framework (CAF) and Well-Architected Framework (WAF) to security strategies.
• Identify key security benchmarks for cloud-based environments.

This module takes a deeper dive into security solutions that align with Microsoft’s CAF and WAF. It focuses on building secure, scalable cloud solutions tailored to organisational needs.

• Design secure solutions based on the Cloud Adoption Framework (CAF).
• Use the Well-Architected Framework (WAF) to ensure scalability, performance, and cost-effectiveness.
• Apply Microsoft’s security and governance tools in cloud and hybrid environments.

This module focuses on aligning security solutions with the Microsoft Cybersecurity Reference Architecture (MCRA) and Microsoft Cloud Security Benchmarks (MCSB) to ensure best practice and governance.

• Implement security strategies that align with MCRA for comprehensive coverage of enterprise security.
• Understand and apply the Microsoft Cloud Security Benchmarks (MCSB) for optimal security in cloud environments.
• Build security frameworks that enhance resilience against threats.

In this module, you’ll learn how to design a strategy that enhances organisational resilience against cyber threats, especially ransomware. You’ll explore disaster recovery, data protection, and response strategies.

• Learn to build resilient architectures that withstand cyberattacks like ransomware.
• Understand how to integrate disaster recovery and backup strategies.
• Implement post-attack recovery plans to minimise disruption and data loss.

This module helps you design security solutions that ensure regulatory compliance with standards such as GDPR, HIPAA, and PCI DSS. You’ll learn how to integrate security practices that meet these critical requirements.

• Identify key compliance regulations and how they impact cybersecurity design.
• Implement security solutions that ensure data protection and meet regulatory requirements.
• Use Microsoft tools like Purview to track compliance and maintain governance

This module covers best practices for designing secure identity and access management solutions. You’ll explore how to safeguard identities, control access, and protect privileged accounts.

• Design secure identity management solutions that ensure proper access control.
• Implement multifactor authentication (MFA) and Conditional Access policies.
• Manage privileged access using Microsoft’s identity management tools.

Privileged access is a critical part of any cybersecurity architecture. This module teaches how to secure privileged accounts, monitor access, and prevent security breaches that stem from compromised privileged users.

• Implement best practices for securing privileged accounts.
• Use tools like Microsoft Privileged Identity Management (PIM) to control and monitor access.
• Learn how to enforce least privilege principles across the organisation.

In this module, you’ll learn how to design solutions that improve security operations by leveraging threat detection, response, and monitoring tools. You’ll focus on proactive threat management and incident response.

• Design solutions that optimise security operations centres (SOC).
• Use Microsoft Sentinel to monitor and respond to security incidents.
• Implement strategies for proactive threat detection and continuous security monitoring.

This module focuses on securing Microsoft 365 environments. You’ll learn how to protect email, data, and collaboration tools, ensuring your organisation’s productivity suite is safeguarded.

• Secure your Microsoft 365 environment using tools like Defender for Office 365.
• Protect email and collaboration tools from phishing, malware, and other threats.
• Implement data loss prevention (DLP) policies to secure sensitive information.

This module covers strategies for securing cloud-based and on-premises applications, ensuring they are protected from cyber threats during development and deployment.

• Learn how to secure application development using best practices and Microsoft tools.
• Implement DevSecOps strategies to integrate security into the development lifecycle.
• Secure API management and ensure applications adhere to compliance standards.

This module teaches you how to secure data across different environments. You’ll explore strategies for data discovery, classification, encryption, and monitoring to protect sensitive information.

• Implement data discovery and classification strategies using Microsoft Purview.
• Secure data at rest, in transit, and in use with advanced encryption techniques.
• Design solutions that ensure data integrity and compliance with regulations.

This module explores how to secure SaaS, PaaS, and IaaS platforms in cloud and hybrid environments. You’ll learn to manage security responsibilities based on the shared responsibility model.

• Secure cloud services by applying the shared responsibility model.
• Implement best practices for securing SaaS, PaaS, and IaaS environments.
• Use Microsoft Defender for Cloud to monitor and secure workloads across platforms.

This module focuses on improving security posture in hybrid and multicloud environments. You’ll learn how to assess vulnerabilities, manage risks, and continuously monitor the security landscape.wa

• Implement security posture management solutions for hybrid and multicloud environments.
• Use Microsoft Defender for Cloud to monitor and assess security risks.
• Design solutions that ensure consistent security policies across cloud providers.

Securing endpoints is essential to a strong cybersecurity strategy. In this module, you’ll learn how to protect both server and client endpoints, from desktops to virtual machines.

• Secure server and client endpoints using Microsoft Defender for Endpoint.
• Implement Endpoint Detection and Response (EDR) solutions for continuous monitoring.
• Protect endpoints from malware, ransomware, and other attacks.

This final module focuses on network security and Security Service Edge (SSE). You’ll learn how to design network security solutions that prevent attacks and ensure secure communications.

• Implement network security solutions using firewalls, network segmentation, and Zero Trust.
• Use Microsoft Entra Internet Access and Microsoft Entra Private Access to secure communications.
• Design solutions that mitigate DDoS and other network-based threats.