Microsoft Cybersecurity Architect

Outline

• Introduction to Zero Trust and best practice frameworks
  • Describe antipatterns and best practices
  • Describe the concept of Zero Trust
  • Describe the frameworks
  • Describe the Zero Trust adoption framework and rapid modernization plan
  • Describe how the frameworks relate to each other
  • Module assessment
• Design security solutions that align with the Cloud Adoption Framework (CAF) and Well-Architected Framework (WAF)
  • Understand the Cloud Adoption Framework
  • Understand the Cloud Adoption Framework secure methodology
  • Understand Azure landing zones
  • Design security with Azure landing zones
  • Understand the Well-Architected Framework
  • Understand the Well-Architected Framework security pillar
  • Evaluate a security strategy
  • Define a security strategy
  • Recommend solutions for security and governance
  • Design secure DevSecOps processes
  • Design a strategy for secure AI adoption
  • Module assessment
• Design solutions that align with the Microsoft Cybersecurity Reference Architecture (MCRA) and Microsoft cloud security benchmark (MCSB)
  • Describe the Microsoft Cybersecurity Reference Architecture
  • Describe the Microsoft Cloud Security Benchmark
  • Design solutions with best practices for capabilities and controls
  • Design solutions with best practices for protecting against insider, external and supply chain attacks.
  • Design AI solutions that align to the Microsoft Cloud Security Benchmark
  • Design solutions that align with the Zero Trust adoption framework
  • Module assessment
• Design a resiliency strategy for ransomware and other attacks based on Microsoft Security Best Practices
  • Common cyberthreats and attack patterns
  • Support business resiliency
  • Design solutions for mitigating ransomware attacks, including prioritization of BCDR and privileged access
  • Design solutions for business continuity and disaster recovery (BCDR), including secure backup and restore
  • Evaluate solutions for security updates
  • Module assessment
• Design solutions for regulatory compliance
  • AI compliance considerations
  • Translate compliance requirements into security controls
  • Design a solution to address compliance requirements by using Microsoft Purview
  • Address privacy requirements with Microsoft Priva
  • Address security and compliance requirements with Azure Policy
  • Evaluate and validate alignment with regulatory standards and benchmarks by using Microsoft Defender for Cloud
  • Module assessment
• Design solutions for identity and access management
  • Design a solution for access to SaaS, PaaS, IaaS, hybrid, and multicloud resources
  • Design a solution for Microsoft Entra ID, including hybrid and multicloud environments
  • Design a solution for external identities
  • Design modern authentication and authorization strategies
  • Validate alignment of Conditional Access policies with a Zero Trust strategy
  • Specify requirements for securing Active Directory Domain Services
  • Design a solution to manage secrets, keys, and certificates
  • Knowledge check
• Design solutions for securing privileged access
  • Secure privileged access
  • Design privileged role assignment using the Enterprise Access Model
  • Evaluate the security and governance of Microsoft Entra ID solutions
  • Design a solution to secure tenant administration
  • Design a solution for cloud infrastructure entitlement management
  • Design a solution for privileged access workstations and remote access
  • Evaluate an access review management solution
  • Evaluate the security of Active Directory Domain Services (AD DS)
  • Module assessment
• Design solutions for security operations
  • Describe the function of Security operations (SecOps)
  • Design monitoring to support hybrid and multicloud environments
  • Design solutions to support centralized logging and auditing
  • Design solutions for detection and response that includes extended detection and response (XDR) and security information and event management (SIEM)
  • Design a solution for security orchestration, automation, and response (SOAR)
  • Design and evaluate security workflows, including incident response, threat hunting, and incident management
  • Design and evaluate threat detection coverage by using MITRE ATT&CK matrices, including Cloud, Enterprise, Mobile, and ICS
  • Module assessment
• Interactive case study: Modernizing identity and data security
  • Interactive case study
  • Interactive case study highlights
  • Knowledge check
• Interactive case study: Modernizing user access control and threat resilience
  • Interactive case study
  • Interactive case study highlights
  • Knowledge check
• Evaluate solutions for securing Microsoft 365
  • Evaluate security posture for productivity and collaboration workloads by using metrics
  • Evaluate solutions that include Microsoft Defender for Office 365 and Microsoft Defender for Cloud Apps
  • Evaluate device management solutions that include Microsoft Intune
  • Evaluate solutions for securing data in Microsoft 365 using Microsoft Purview
  • Evaluate data security and compliance controls in Microsoft Copilot for Microsoft 365 services
  • Module assessment
• Design solutions for securing applications
  • Design and implement standards to secure application development
  • Design a full lifecycle strategy for application security
  • Evaluate security posture of existing application portfolios
  • Evaluate application threats with threat modeling
  • Secure access for workload identities
  • Design a solution for API management and security
  • Design a solution for secure access to applications
  • Map technologies to application security requirements
  • Module assessment
• Design solutions for securing an organization's data
  • Data security design principles and frameworks
  • Evaluate solutions for data discovery and classification
  • Evaluate solutions for encryption of data at rest and in transit, including Azure KeyVault and infrastructure encryption
  • Design data security for Azure workloads
  • Design security for data used in AI workloads
  • Design security for Azure Storage
  • Design a security solution with Microsoft Defender for SQL and Microsoft Defender for Storage
  • Module assessment
• Interactive case study: Securing apps and data
  • Interactive case study
  • Interactive case study highlights
  • Knowledge check
• Specify requirements for securing SaaS, PaaS, and IaaS services
  • Specify security baselines for SaaS, PaaS, and IaaS services
  • Specify security requirements for IoT workloads
  • Specify security requirements for web workloads
  • Specify security requirements for containers and container orchestration
  • Specify security requirements for AI workloads
  • Module assessment
• Design solutions for security posture management in hybrid and multicloud environments
  • Use the Microsoft Cloud Security Benchmark to design and evaluate security posture
  • Design integrated posture management solutions that include Microsoft Defender for Cloud in hybrid and multicloud environments
  • Evaluate security posture by using Microsoft Defender for Cloud, including Secure Score
  • Design cloud workload protection with Microsoft Defender for Cloud
  • Design a solution for integrating hybrid and multicloud environments by using Azure Arc
  • Design a solution for external attack surface management
  • Posture management using Exposure management attack paths
  • Module assessment
• Design solutions for securing server and client endpoints
  • Introduction to endpoint security
  • Specify security requirements for servers
  • Specify security requirements for mobile devices and clients
  • Specify security requirements for IoT devices and embedded systems
  • Evaluate solutions for securing operational technology (OT) and industrial control systems (ICS) by using Microsoft Defender for IoT
  • Specify security baselines for server and client endpoints
  • Design a solution for secure remote access
  • Evaluate Windows Local Admin Password Solution (LAPS) solutions
  • Module assessment
• Design solutions for network security
  • Evaluate network designs to align with security requirements and best practices
  • Design solutions for network segmentation
  • Design solutions for traffic filtering with network security groups
  • Design solutions for network posture management
  • Design solutions for network monitoring
  • Evaluate solutions that use Microsoft Entra Internet Access
  • Evaluate solutions that use Microsoft Entra Private Access
  • Module assessment
• Interactive case study: Securing endpoints and infrastructure
  • Interactive case study
  • Interactive case study highlights
  • Knowledge check