No matching guide sections
Change the search or section filter.
Study Guide preview
Unlock Pro for every SC-100 flashcard-note lesson.
Preview the beginning of Section 1. Pro includes the complete Study Guide by section, plus Course Notes, guided course access, and Pro downloads.
Unlock with Pro
Opens the SC-100 Practice Test purchase options.
Section 1
Align security and governance with CAF, WAF, landing zones, and DevSecOps
Preview
Preview: Design solutions that align with security best practices and priorities
Preview includes- 4 of 4 lesson topics
- 1 overview segment
- 3 core concepts
- 2 exam tips
Lesson Topics
- Aligning Security with CAF
- Landing Zone Responsibility
- DevSecOps Integration
- Effective Governance Measurement
Overview
This objective covers designing security solutions that align with the Cloud Adoption Framework (CAF), Azure landing zones, and DevSecOps practices. It emphasizes a holistic approach, considering people, process, and technology to address business risks and cloud adoption plans, while recognizing distinct responsibilities between platform and workload teams.
Core Concepts
- CAF provides a framework for aligning security with business goals and cloud adoption plans.
- Landing zones establish a governed platform foundation, separating platform and workload responsibilities.
- DevSecOps integrates security requirements, testing, and feedback throughout delivery rather than adding one final security gate.
Exam Tips
- Focus on the interconnectedness of CAF, landing zones, and DevSecOps. Understand the distinct roles of platform and workload teams.
- When presented with tradeoffs, consider the guidance provided by both CAF and WAF.
Section 1 continues in Pro.Unlock Pro to read the full Align security and governance with CAF, WAF, landing zones, and DevSecOps lesson plus every remaining SC-100 Study Guide section.
Unlock with Pro
Section 2
Design Security Service Edge with Entra Internet and Private Access
Pro
Design Security Service Edge with Entra Internet and Private Access unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 3
Design XDR, SIEM, SOAR, and hybrid security operations
Pro
Design XDR, SIEM, SOAR, and hybrid security operations unlocks with Pro.Unlock Pro to read the full 8 topics flashcard-note study guide for this section.
Unlock with Pro
Section 4
Design a resiliency strategy for ransomware and other attacks
Pro
Design a resiliency strategy for ransomware and other attacks unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 5
Design modern identity, authentication, authorization, and external access
Pro
Design modern identity, authentication, authorization, and external access unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 6
Design privileged access and identity governance
Pro
Design privileged access and identity governance unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 7
Align solutions with MCRA and Zero Trust priorities
Pro
Align solutions with MCRA and Zero Trust priorities unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 8
Evaluate Microsoft 365 security posture and protection
Pro
Evaluate Microsoft 365 security posture and protection unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 9
Design hybrid and multicloud posture management with Defender for Cloud
Pro
Design hybrid and multicloud posture management with Defender for Cloud unlocks with Pro.Unlock Pro to read the full 7 topics flashcard-note study guide for this section.
Unlock with Pro
Section 10
Align solutions with the Microsoft Cloud Security Benchmark
Pro
Align solutions with the Microsoft Cloud Security Benchmark unlocks with Pro.Unlock Pro to read the full 3 topics flashcard-note study guide for this section.
Unlock with Pro
Section 11
Design secure backup and restore for business continuity and disaster recovery
Pro
Design secure backup and restore for business continuity and disaster recovery unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 12
Design a full-lifecycle application security strategy
Pro
Design a full-lifecycle application security strategy unlocks with Pro.Unlock Pro to read the full 8 topics flashcard-note study guide for this section.
Unlock with Pro
Section 13
Specify endpoint baselines and Windows LAPS requirements
Pro
Specify endpoint baselines and Windows LAPS requirements unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 14
Specify security requirements for cloud workloads and containers
Pro
Specify security requirements for cloud workloads and containers unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 15
Design encryption, Key Vault, and AI data protections
Pro
Design encryption, Key Vault, and AI data protections unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 16
Design workload identity and API security
Pro
Design workload identity and API security unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 17
Secure Azure databases and storage with workload protection
Pro
Secure Azure databases and storage with workload protection unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 18
Design centralized logging, auditing, and activity investigation
Pro
Design centralized logging, auditing, and activity investigation unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 19
Prioritize exposure with attack paths and Security Exposure Management
Pro
Prioritize exposure with attack paths and Security Exposure Management unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 20
Design API management and web application firewall controls
Pro
Design API management and web application firewall controls unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 21
Design access for agent and workload identities
Pro
Design access for agent and workload identities unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 22
Design access reviews and lifecycle governance
Pro
Design access reviews and lifecycle governance unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 23
Integrate hybrid resources with Azure Arc
Pro
Integrate hybrid resources with Azure Arc unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 24
Secure IoT, OT, and industrial control systems
Pro
Secure IoT, OT, and industrial control systems unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 25
Evaluate detection coverage with MITRE ATT&CK
Pro
Evaluate detection coverage with MITRE ATT&CK unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 26
Discover external attack surface with Defender EASM
Pro
Discover external attack surface with Defender EASM unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 27
Evaluate application threats with threat modeling
Pro
Evaluate application threats with threat modeling unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 28
Design secrets, keys, and certificate management
Pro
Design secrets, keys, and certificate management unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 29
Design data discovery, classification, and threat priorities
Pro
Design data discovery, classification, and threat priorities unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 30
Secure local administrator passwords with Windows LAPS
Pro
Secure local administrator passwords with Windows LAPS unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 31
Translate compliance requirements into Purview, Azure Policy, and Defender for Cloud controls
Pro
Translate compliance requirements into Purview, Azure Policy, and Defender for Cloud controls unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro