Practice Exams SC-900: MS Security, Compliance & ID Fundam

所在平台: Udemy

课程主页: https://www.udemy.com/course/practice-exams-sc-900-ms-security-compliance-id-fundam/

课程评论:没有评论

第一个写评论        关注课程

课程简介

**Coursera SC-900 考前模拟测试课程总结** 本课程旨在帮助您为 Microsoft SC-900 认证考试(MS 安全、合规性和身份基础)进行准备。请注意,本模拟测试中的题目并非官方原题,但它们涵盖了考试大纲中列出的所有知识点。许多题目基于虚构场景,旨在考察您在实际应用中的理解能力。 **核心学习目标:** * **理解安全、合规性和身份(10-15%):** * 描述安全和合规的基本概念。 * 解释共享责任模型。 * 理解纵深防御和零信任模型。 * 区分加密和哈希。 * 掌握治理、风险和合规性(GRC)概念。 * 定义身份,将其视为安全的第一道防线。 * 阐述身份验证和授权的区别。 * 了解身份提供者。 * 熟悉目录服务和 Active Directory。 * 理解联合身份的概念。 * **了解 Microsoft Entra 的功能(25-30%):** * 描述 Microsoft Entra ID 的功能及身份类型。 * 解释不同类型的身份(例如,用户、设备)。 * 理解混合身份的部署和管理。 * 掌握 Microsoft Entra ID 的身份验证能力。 * 熟悉各种身份验证方法,特别是多重身份验证(MFA)。 * 了解密码保护和管理策略。 * 描述 Microsoft Entra ID 的访问管理能力。 * 解释条件访问策略。 * 掌握 Microsoft Entra 角色和基于角色的访问控制(RBAC)。 * 了解 Microsoft Entra ID 的身份保护和治理功能。 * 熟悉 Microsoft Entra ID Governance。 * 掌握访问评审。 * 了解 Microsoft Entra Privileged Identity Management (PIM)。 * 解释 Entra ID Protection。 * 描述 Microsoft Entra Permissions Management。 * **掌握 Microsoft 安全解决方案的功能(35-40%):** * 描述 Azure 的核心基础设施安全服务,包括 Azure DDoS 防护、Azure 防火墙、Web 应用程序防火墙(WAF)以及在 Azure 虚拟网络中进行网络分段。 * 解释网络安全组(NSG)和 Azure Bastion。 * 了解 Azure Key Vault 的用途。 * 掌握 Azure 的安全管理能力,包括 Microsoft Defender for Cloud。 * 解释云安全状况管理(CSPM)以及安全策略和计划如何改善云安全状况。 * 了解云工作负载保护提供的增强安全功能。 * 阐述 Microsoft Sentinel 的能力,包括安全信息和事件管理(SIEM)以及安全编排自动化响应(SOAR)的概念。 * 描述 Microsoft Sentinel 的威胁检测和缓解能力。 * 掌控 Microsoft 365 Defender 的威胁保护能力,包括 Microsoft 365 Defender 服务的整体视图。 * 深入了解 Microsoft Defender for Office 365、Microsoft Defender for Endpoint、Microsoft Defender for Cloud Apps、Microsoft Defender for Identity、Microsoft Defender Vulnerability Management 和 Microsoft Defender Threat Intelligence (Defender TI)。 * 熟悉 Microsoft 365 Defender 门户。 * **了解 Microsoft 合规性解决方案的功能(20-25%):** * 描述 Microsoft Service Trust Portal 及其隐私原则。 * 了解 Service Trust Portal 提供的各种服务。 * 掌握 Microsoft Priva 的功能。 * 理解 Microsoft Purview 的合规性管理能力,包括 Microsoft Purview 合规性门户。 * 解释 Compliance Manager 及其合规性评分的概念和优势。 * 掌握 Microsoft Purview 在信息保护、数据生命周期管理和数据治理方面的能力。 * 了解数据分类能力。 * 熟悉 Content Explorer 和 Activity Explorer 的用途。 * 掌握敏感度标签和敏感度标签策略。 * 解释数据丢失防护(DLP)的概念。 * 了解记录管理。 * 阐述保留策略、保留标签和保留标签策略。 * 掌握 Microsoft Purview 中的统一数据治理解决方案。 * 理解 Microsoft Purview 在内部风险管理、eDiscovery 和审核方面的能力。 **重要提示:** * 本课程提供的题目会随机排序,因此请务必理解题目背后的原理,而非仅仅记忆答案选项。 * 本模拟测试应作为补充材料,不应替代其他学习资源。 如果您发现任何内容需要注意,请提供带有截图的消息,我们将及时进行审查。

课程评论(0条)

课程详情

In order to set realistic expectations, please note: These questions are NOT official questions that you will find on the official exam. These questions DO cover all the material outlined in the knowledge sections below. Many of the questions are based on fictitious scenarios which have questions posed within them.The official knowledge requirements for the exam are reviewed routinely to ensure that the content has the latest requirements incorporated in the practice questions. Updates to content are often made without prior notification and are subject to change at any time.Each question has a detailed explanation and links to reference materials to support the answers which ensures accuracy of the problem solutions.The questions will be shuffled each time you repeat the tests so you will need to know why an answer is correct, not just that the correct answer was item "B" last time you went through the test.NOTE: This course should not be your only study material to prepare for the official exam. These practice tests are meant to supplement topic study material.Should you encounter content which needs attention, please send a message with a screenshot of the content that needs attention and I will be reviewed promptly. Providing the test and question number do not identify questions as the questions rotate each time they are run. The question numbers are different for everyone.If you have an interest in Microsoft SCI solutions, this exam is for you, whether you're a:Business stakeholderNew or existing IT professionalStudentYou should be familiar with Microsoft Azure and Microsoft 365 and want to understand how Microsoft SCI solutions can span across these solution areas to provide a holistic and end-to-end solution.Skills at a glanceDescribe the concepts of security, compliance, and identity (10-15%)Describe the capabilities of Microsoft Entra (25-30%)Describe the capabilities of Microsoft security solutions (35-40%)Describe the capabilities of Microsoft compliance solutions (20-25%)Describe the concepts of security, compliance, and identity (10-15%)Describe security and compliance conceptsDescribe the shared responsibility modelDescribe defense-in-depthDescribe the Zero Trust modelDescribe encryption and hashingDescribe Governance, Risk, and Compliance (GRC) conceptsDefine identity conceptsDefine identity as the primary security perimeterDefine authenticationDefine authorizationDescribe identity providersDescribe the concept of directory services and Active DirectoryDescribe the concept of federationDescribe the capabilities of Microsoft Entra (25-30%)Describe function and identity types of Microsoft Entra IDDescribe Microsoft Entra IDDescribe types of identitiesDescribe hybrid identityDescribe authentication capabilities of Microsoft Entra IDDescribe the authentication methodsDescribe multi-factor authentication (MFA)Describe password protection and management capabilitiesDescribe access management capabilities of Microsoft Entra IDDescribe Conditional AccessDescribe Microsoft Entra roles and role-based access control (RBAC)Describe identity protection and governance capabilities of Microsoft EntraDescribe Microsoft Entra ID GovernanceDescribe access reviewsDescribe the capabilities of Microsoft Entra Privileged Identity ManagementDescribe Entra ID ProtectionDescribe Microsoft Entra Permissions ManagementDescribe the capabilities of Microsoft security solutions (35-40%)Describe core infrastructure security services in AzureDescribe Azure distributed denial-of-service (DDoS) ProtectionDescribe Azure FirewallDescribe Web Application Firewall (WAF)Describe network segmentation with Azure virtual networksDescribe network security groups (NSGs)Describe Azure BastionDescribe Azure Key VaultDescribe security management capabilities of AzureDescribe Microsoft Defender for CloudDescribe Cloud Security Posture Management (CSPM)Describe how security policies and initiatives improve the cloud security postureDescribe enhanced security features provided by cloud workload protectionDescribe capabilities of Microsoft SentinelDefine the concepts of security information and event management (SIEM) and security orchestration automated response (SOAR)Describe threat detection and mitigation capabilities in Microsoft SentinelDescribe threat protection with Microsoft 365 DefenderDescribe Microsoft 365 Defender servicesDescribe Microsoft Defender for Office 365Describe Microsoft Defender for EndpointDescribe Microsoft Defender for Cloud AppsDescribe Microsoft Defender for IdentityDescribe Microsoft Defender Vulnerability ManagementDescribe Microsoft Defender Threat Intelligence (Defender TI)Describe the Microsoft 365 Defender portalDescribe the capabilities of Microsoft compliance solutions (20-25%)Describe Microsoft Service Trust Portal and privacy principlesDescribe the Service Trust Portal offeringsDescribe the privacy principles of MicrosoftDescribe Microsoft PrivaDescribe compliance management capabilities of Microsoft PurviewDescribe the Microsoft Purview compliance portalDescribe Compliance ManagerDescribe the uses and benefits of compliance scoreDescribe information protection, data lifecycle management, and data governance capabilities of Microsoft PurviewDescribe the data classification capabilitiesDescribe the benefits of Content explorer and Activity explorerDescribe sensitivity labels and sensitivity label policiesDescribe data loss prevention (DLP)Describe records managementDescribe retention policies, retention labels, and retention label policiesDescribe unified data governance solutions in Microsoft PurviewDescribe insider risk, eDiscovery, and audit capabilities in Microsoft PurviewDescribe insider risk managementDescribe eDiscovery solutions in Microsoft PurviewDescribe audit solutions in Microsoft Purview

课程标签

0人关注该课程

主题相关的课程