Explore digital courses

SC-100: Design security solutions for infrastructure

Modules in this learning path:

• Specify Requirements Secure Saas Paas Iaas Services
• Design Solutions Security Posture Management Hybrid Multicloud Environments
• Design Solutions Securing Server Client Endpoints
• Design Solutions Network Security
• Case Study Endpoints Infrastructure

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Duration: 342 minutes

You'll learn about the Cloud Adoption Framework (CAF) and Well-Architected Framework (WAF) and how you can use them to design more secure solutions.

Units in this learning path:

• Introduction
• Introduction Cloud Adoption Framework
• Cloud Adoption Framework Secure Methodology
• Introduction Azure Landing Zones
• Design Security with Azure Landing Zones
• Introduction Well Architected Framework
• Well Architected Framework Security Pillar
• Evaluate Security Strategy
• Define Security Strategy
• Design Security Governance Strategy
• Design Devsecops Processes
• Cloud Adoption Framework Secure AI
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 120 minutes

Design semantic models for scale in Microsoft Fabric. Choose storage modes, design star schema relationships, create scalable calculation patterns, and configure settings for large datasets and concurrent consumption.

Units in this learning path:

• Introduction
• Storage Modes
• Relationships
• Dynamic Elements
• Enterprise Settings
• Exercise
• Knowledge Check
• Summary

Products: Fabric, Power Bi

Roles: Data Analyst, Data Engineer

Level: Intermediate

Subjects: Data Modeling

Duration: 65 minutes

Learn how to design identity and access management solutions for cloud, hybrid, and multicloud environments, including external identities, Conditional Access, and secrets management.

Units in this learning path:

• Introduction
• Design Cloud Hybrid Multi Cloud Access Strategies
• Design Solution Entra Hybrid Multicloud
• Design Solution External Identities
• Design Modern Authentication Authorization Strategies
• Design Solution Agent Identities
• Conditional Access Agent Id
• Align Conditional Access Zero Trust
• Specify Requirements Secure Active Directory Domain Services
• Design Solution Manage Secrets Keys Certificates
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel, Entra Id

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security, Identity Access

Duration: 111 minutes

You learn how to design secure network solutions using techniques like network segmentation, traffic filtering, network monitoring, and posture management.

Units in this learning path:

• Introduction
• Evaluate Network Designs Best Practices
• Design Solutions Network Segmentation
• Design Solutions Traffic Filtering Network Security Groups
• Design Solutions Network Posture Management
• Design Solutions Network Monitoring
• Evaluate Solutions Entra Internet Access
• Evaluate Solutions Entra Private Access
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 76 minutes

Learn how to design security solutions that address regulatory compliance requirements across multicloud environments. Translate compliance requirements into security controls using Zero Trust principles, Microsoft Purview, Microsoft Priva, Azure Policy, and Microsoft Defender for Cloud.

Units in this learning path:

• Introduction Regulatory Compliance
• Translate Compliance Requirements Security Solution
• AI Compliance Considerations
• Address Compliance Requirements Microsoft Purview
• Address Privacy Requirements Microsoft Priva
• Address Security Compliance Requirements Azure Policy
• Evaluate Infrastructure Compliance Defender Cloud
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 60 minutes

You learn about designing solutions that secure an organization's data using capabilities like Microsoft Purview, Defender for SQL, Defender for Storage.

Units in this learning path:

• Introduction
• Introduction Data Security
• Design Solution Data Discovery Classification Microsoft Purview
• Specify Priorities Mitigating Threats Data
• Design Solution Data Protection
• Design Data Security Azure Workloads
• Design Security Data AI Workloads
• Design Security Azure Storage
• Design Security Defender SQL Storage
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 77 minutes

You learn how to secure applications, APIs and the development process using techniques like posture management, threat modeling, and secure access for workload identities.

Units in this learning path:

• Introduction Application Security
• Design Implement Standards Secure Application Development
• Design Full Lifecycle Strategy Application Security
• Evaluate Security Posture Existing Application Portfolios
• Evaluate Application Threats Threat Modeling
• Secure Access Workload Identities
• Design Solution API Management Security
• Design Solution Secure Access Applications
• Map Technologies Application Security Requirements
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 78 minutes

You learn advanced techniques for designing solutions that secure privileged access using Zero Trust principles, the Enterprise Access Model, and Microsoft security frameworks.

Units in this learning path:

• Introduction
• Introduction Privileged Access
• Enterprise Access Model
• Design Identity Governance Solutions
• Design Solution Secure Tenant Administration
• Design Cloud Infrastructure Entitlement Management
• Design Solution Privileged Access Workstations Bastion Services
• Evaluate Access Review Management Solution
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 58 minutes

You learn how to analyze the security requirements for different types of endpoints including servers, clients, IoT, OT, mobile, and embedded devices. These requirements take into account different platforms and operating systems and set standards for endpoint protection, hardening, and configuration.

Units in this learning path:

• Introduction Endpoint Security
• Specify Server Security Requirements
• Specify Requirements Mobile Devices Clients
• Specify Embedded Device Security Requirements
• Design Solution Securing Operational Technology Industrial Control Systems
• Specify Security Baselines Server Client Endpoints
• Design Solution Secure Remote Access
• Evaluate Windows Local Admin Password Solution
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 88 minutes

You learn techniques to design security operations capabilities including logging, auditing, Security Information, and Event Management (SIEM), Security Orchestration and Automated Response (SOAR), and security workflows.

Units in this learning path:

• Introduction
• Introduction Security Operations Secops
• Design Security Operations Capabilities Hybrid Multicloud Environments
• Design Centralized Logging Auditing
• Design Solutions Detection Response
• Design Solution Security Orchestration Automation Response
• Design Security Workflows
• Design Threat Detection Coverage
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 87 minutes

You learn how to design security posture management solutions that integrate into hybrid and multicloud scenarios using capabilities in Microsoft Defender for Cloud, Azure Arc, and Microsoft Cloud Security Benchmark (MCSB).

Units in this learning path:

• Introduction Hybrid Multi Cloud Posture Management
• Evaluate Security Posture Microsoft Cloud Security Benchmark
• Evaluate Security Posture Microsoft Defender Cloud
• Design Integrated Posture Management Workload Protection
• Design Cloud Workload Protection Microsoft Defender Cloud
• Integrate Hybrid Multi Cloud Environments Azure Arc
• Design Solution External Attack Surface Management
• Posture Management Using Exposure Management Attack Paths
• Knowledge Check
• Summary

Products: Azure, Defender For Cloud, Defender For Cloud Apps, Defender Identity, Microsoft Sentinel

Roles: Security Engineer, Solution Architect

Level: Advanced

Subjects: Security, Cloud Security

Duration: 70 minutes