|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/sc-900-ms-security-compliance-and-identity-fundamentals/
课程评论：没有评论
课程名称：SC-900考试：安全、合规与身份基础知识 概述： SC-900认证由微软设计，旨在帮助专业人士和希望在网络安全与合规领域发展职业生涯的人士深入了解安全、合规和身份管理的基本概念，以及微软基于云的安全服务。 课程安排： SC-900课程分为四个主要部分，每部分包含多个模块，以确保对关键概念的全面理解。 1. **安全、合规与身份基础知识** - **模块1：安全概念与方法论** - 探索零信任模型，重点关注明确验证、最小权限访问和假设漏洞等原则。 - 理解身份、设备、应用、数据和网络等安全支柱。 - 学习重要的共享责任模型以及机密性、完整性和可用性原则。 - **模块2：微软的安全和合规原则** - 研究微软的六项隐私原则及其对安全策略的影响。 - 使用服务信任门户访问Azure的合规性和监管文档。 2. **微软身份与访问管理解决方案** - **模块1：身份原则与概念** - 深入了解身份基础知识，如身份作为安全边界、身份验证、授权及Active Directory的角色。 - 理解联合服务在现代身份管理中的作用。 - **模块2：Azure AD服务与身份类型** - 了解基于云的身份提供者的优势，如单一登录（SSO）。 - 探索Azure AD的定价模型及其对多种身份类型的支持，包括外部用户。 - **模块3：Azure AD身份验证能力** - 理解多因素身份验证（MFA）如何增强安全性。 - 探索Azure AD中的密码保护和管理功能。 - **模块4：Azure AD访问管理** - 了解条件访问如何保护组织资产。 - 学习Azure AD角色在资源访问管理中的应用。 - **模块5：Azure AD的身份保护与治理** - 探索Azure AD的身份保护和治理特性，包括基于风险的策略。 3. **微软安全解决方案** - **模块1：Azure中的基本安全能力** - 发现网络安全组（NSGs）、Azure防火墙和Azure DDoS保护等服务。 - 学习数据保护的加密技术。 - **模块2：使用Azure安全中心进行安全管理** - 了解Azure安全中心如何提供统一的安全管理系统。 - 探索Azure安全评分和Azure Defender监控安全状态和合规准备。 - **模块3：与Azure Sentinel的安全** - 学习Azure Sentinel在SIEM（安全信息与事件管理）中的作用。 - 了解威胁检测、主动狩猎及响应能力。 - **模块4：Microsoft 365 Defender的威胁保护** - 了解Microsoft Defender如何保护身份、终端、Office 365和云应用免受威胁。 - **模块5：Microsoft 365中的安全管理** - 深入Microsoft 365安全中心、安全评分和安全报告。 - 学习Microsoft 365中的事件管理能力。 - **模块6：使用Microsoft Intune进行终端安全** - 理解Microsoft Intune如何通过Microsoft Endpoint Manager管理和保护终端。 4. **微软合规解决方案** - **模块1：Microsoft 365中的合规管理** - 了解Microsoft 365合规中心和合规管理工具。 - 理解这些工具如何简化组织的合规过程。 - **模块2：信息保护与治理** - 研究数据分类、记录管理和数据丢失预防（DLP）等功能。 - **模块3：内部风险管理** - 探索内部风险管理、沟通合规性和特权访问管理（PAM）。 - **模块4：Microsoft 365中的电子发现** - 理解电子发现的目的、核心工作流程及高级电子发现能力。 - **模块5：Microsoft 365中的审计能力** - 学习基础审计及Microsoft 365中高级审计的好处。 - **模块6：Azure中的资源治理** - 探索Azure的资源治理能力，包括云采用框架。 通过本课程，学员将获得必要的知识与技能，能够在未来的网络安全与合规领域中脱颖而出。
SC-900 Certification: Microsoft Security, Compliance, and Identity FundamentalsThe SC-900 certification is designed for professionals and individuals aiming to build a career in cybersecurity and compliance. Created by Microsoft, this exam covers essential security, compliance, and identity concepts, focusing on Microsoft's cloud-based security services.Course Overview: The SC-900 course is structured into four main sections, each featuring multiple modules to ensure a thorough understanding of key concepts:1. Security, Compliance, and Identity FundamentalsModule 1: Security Concepts and MethodologiesExplore the Zero Trust model, focusing on principles like verify explicitly, least privilege access, and assume breach.Understand security pillars including identity, devices, applications, data, and networks.Learn about the shared responsibility model, crucial for organizations moving to the cloud, and the principles of confidentiality, integrity, and availability.Module 2: Microsoft Security and Compliance PrinciplesStudy Microsoft's six privacy principles and their impact on security strategies.Navigate the Service Trust Portal to access compliance and regulatory documentation for Azure.2. Microsoft Identity and Access Management SolutionsModule 1: Identity Principles and ConceptsDelve into identity basics such as identity as a security perimeter, authentication, authorization, and the role of Active Directory.Understand federated services and their role in modern identity management.Module 2: Azure AD Services and Identity TypesLearn the advantages of a cloud-based identity provider, including single sign-on (SSO).Explore Azure AD's pricing models and support for various identity types, including external users.Module 3: Azure AD Authentication CapabilitiesUnderstand multi-factor authentication (MFA) and how it enhances security.Explore password protection and management features within Azure AD.Module 4: Azure AD Access ManagementLearn about Conditional Access and how it secures organizational assets.Study Azure AD roles and their use in managing access to resources.Module 5: Identity Protection and Governance in Azure ADExplore Azure AD's identity protection and governance features, including risk-based policies.3. Microsoft Security SolutionsModule 1: Basic Security Capabilities in AzureDiscover services like network security groups (NSGs), Azure Firewall, and Azure DDoS Protection.Learn about encryption techniques for data protection.Module 2: Security Management with Azure Security CenterUnderstand how Azure Security Center provides a unified security management system.Explore Azure secure score and Azure Defender for monitoring security posture and compliance readiness.Module 3: Security with Azure SentinelStudy Azure Sentinel and its role in SIEM (Security Information and Event Management).Learn about threat detection, proactive hunting, and response capabilities.Module 4: Microsoft 365 Defender for Threat ProtectionExplore how Microsoft Defender protects against threats across identities, endpoints, Office 365, and cloud apps.Module 5: Security Management in Microsoft 365Dive into the Microsoft 365 security center, Secure Score, and security reports.Learn about incident management capabilities in Microsoft 365.Module 6: Endpoint Security with Microsoft IntuneUnderstand how Microsoft Intune manages and secures endpoints through Microsoft Endpoint Manager.4. Microsoft Compliance SolutionsModule 1: Compliance Management in Microsoft 365Learn about tools like the Microsoft 365 compliance center and Compliance Manager.Understand how these tools simplify compliance processes for organizations.Module 2: Information Protection and GovernanceStudy features like data classification, records management, and data loss prevention (DLP).Module 3: Insider Risk ManagementExplore insider risk management, communication compliance, and privileged access management (PAM).Module 4: E-Discovery in Microsoft 365Understand the purpose of eDiscovery, its core workflows, and advanced eDiscovery capabilities.Module 5: Audit Capabilities in Microsoft 365Learn about core auditing and the benefits of Advanced Auditing in Microsoft 365.Module 6: Resource Governance in AzureExplore Azure's resource governance capabilities, including the Cloud Adoption Framework.
