|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/sc-900-ms-security-compliance-identity-fundamentals-exam-v/
课程评论：没有评论
**Course Title:** SC-900: MS Security, Compliance & Identity Fundamentals Exam Exam Preparation **Course Description:** 本课程是为 Microsoft SC-900 考试（2023 年版 Microsoft 安全、合规性和标识基础知识）提供全面的备考资源。通过两套高质量的模拟测试，学员不仅能够通过考试，还能深入掌握 Microsoft 生态系统中的安全与合规性知识。 **考试概述:** 模拟测试严格遵循 SC-900 考试格式，包含 50 道题目，限时 120 分钟，合格分为 70 分。本课程旨在帮助学员有效评估自身准备程度。 **课程亮点:** * **两套模拟测试:** 每套测试包含 [NB] 道题目，并提供详细的答案解析，帮助学员深入理解考点。 * **更新至 2023 年 7 月:** 确保学员掌握最新的考试主题。 **核心技能涵盖:** 1. **安全、合规性和标识概念 (10-15%):** * 描述安全与合规性概念。 * 理解共享责任模型。 * 了解纵深防御和零信任模型。 * 熟悉加密和哈希技术。 * 定义标识概念，包括标识作为主要安全边界。 * 理解身份验证、授权、身份提供程序、Active Directory 和联合身份验证概念。 2. **Microsoft Azure Active Directory (Azure AD)，现 Microsoft Entra 的功能 (25-30%):** * 描述 Azure AD 的基本身份服务和身份类型。 * 理解 Azure AD 及其标识类型。 * 学习混合标识和外部标识类型。 * 掌握 Azure AD 的身份验证功能、身份验证方法。 * 熟悉多重身份验证 (MFA) 和自助式密码重置。 * 了解 Azure AD 的密码保护和管理功能。 * 掌握 Azure AD 的访问管理能力，包括条件访问。 * 理解 Azure AD 角色的优势和基于角色的访问控制 (RBAC)。 * 学习 Azure AD 的身份保护和治理功能，包括身份治理、权利管理、访问评审。 * 掌握 Azure AD 特权标识管理 (PIM)。 * 了解 Azure AD 身份保护。 3. **Microsoft 安全解决方案的功能 (25-30%):** * 描述 Azure 的基本安全功能，包括 Azure DDoS 防护、Azure 防火墙、Web 应用程序防火墙。 * 学习通过 Azure 虚拟网络进行网络分段、Azure 网络安全组 (NSG)。 * 掌握 Azure Bastion 和仅限时 (JIT) VM 访问。 * 了解 Azure 的数据加密方式。 * 掌握 Azure 的安全管理功能，如云安全态势管理 (CSPM)、Microsoft Defender for Cloud 及其增强功能、Azure 安全基线。 * 了解 Microsoft Sentinel 的安全能力，以及 SIEM 和 SOAR 的概念。 * 学习 Microsoft Sentinel 如何提供集成威胁管理。 * 掌握 Microsoft 365 Defender 的威胁保护，包括 Microsoft 365 Defender 服务（Defender for Office 365、Defender for Endpoint、Defender for Cloud Apps、Defender for Identity）以及 Microsoft 365 Defender 门户。 4. **Microsoft 合规性解决方案的功能 (25-30%):** * 描述 Microsoft 服务信任门户 (Service Trust Portal) 和隐私原则。 * 了解 Microsoft Purview 的合规性管理功能，包括 Microsoft Purview 合规性门户、合规性管理器 (Compliance Manager) 及合规分数 (Compliance Score) 的用途和优势。 * 掌握 Microsoft Purview 的信息保护和数据生命周期管理功能，包括数据分类、内容资源管理器 (Content Explorer) 和活动资源管理器 (Activity Explorer) 的优势。 * 了解敏感度标签和敏感度标签策略、数据丢失防护 (DLP)。 * 熟悉记录管理、保留策略、保留标签和保留标签策略。 * 学习 Microsoft Purview 的内部风险（Insider Risk）管理能力，包括沟通合规 (Communication Compliance) 和信息屏障 (Information Barriers)。 * 掌握 Azure 的资源治理能力，包括 Azure Policy 和 Azure Blueprints。 * 了解 Microsoft Purview 统一数据治理解决方案。 **学习目标:** 学员将能够测试自身知识、识别需要进一步学习的领域，并提升相关技能。完成模拟测试后，学员将对 SC-900 认证考试充满信心，为在动态的网络安全领域脱颖而出做好准备。
Welcome to the comprehensive preparation resource for the 2023 Microsoft Security, Compliance, and Identity Fundamentals (SC-900) exam! In this course, you'll find two top-notch practice tests that will help you not only pass the exam but also gain a strong foundational knowledge of security and compliance in the Microsoft ecosystemExam Guide: Our practice tests are structured to mirror the SC-900 exam format, including 50 questions to be completed in 120 minutes, with a passing score of 70. This guide helps you assess your readiness effectivelyWhat to Expect: With two practice tests, each containing NB questions accompanied by detailed explanations, you'll gain an in-depth understanding of the exam content. These tests are updated for July 2023 to ensure you're well-prepared for the latest exam topicsSkills at a glanceDescribe the concepts of security, compliance, and identity (10-15%)Describe the capabilities of Microsoft Azure Active Directory (Azure AD), part of Microsoft Entra (25-30%)Describe the capabilities of Microsoft Security solutions (25-30%)Describe the capabilities of Microsoft compliance solutions (25-30%)Describe the concepts of security, compliance, and identity (10-15%)Describe security and compliance conceptsDescribe the shared responsibility modelDescribe defense in depthDescribe the Zero-Trust modelDescribe encryption and hashingDescribe compliance conceptsDefine identity conceptsDefine identity as the primary security perimeterDefine authenticationDefine authorizationDescribe identity providersDescribe Active DirectoryDescribe the concept of FederationDescribe the capabilities of Microsoft Azure Active Directory (Azure AD), part of Microsoft Entra (25-30%)Describe the basic identity services and identity types of Azure ADDescribe Azure ADDescribe Azure AD identitiesDescribe hybrid identityDescribe the different external identity typesDescribe the authentication capabilities of Azure ADDescribe the authentication methods available in Azure ADDescribe Multi-factor AuthenticationDescribe self-service password resetDescribe password protection and management capabilities available in Azure ADDescribe access management capabilities of Azure ADDescribe conditional accessDescribe the benefits of Azure AD roles.Describe the benefits of Azure AD role-based access controlDescribe the identity protection and governance capabilities of Azure ADDescribe identity governance in Azure ADDescribe entitlement management and access reviewsDescribe the capabilities of Azure AD Privileged Identity Management (PIM)Describe Azure AD Identity ProtectionDescribe the capabilities of Microsoft Security solutions (25-30%)Describe basic security capabilities in AzureDescribe Azure DDoS protectionDescribe Azure FirewallDescribe Web Application FirewallDescribe Network Segmentation with Azure Virtual NetworksDescribe Azure Network Security groupsDescribe Azure Bastion and just-in-time (JIT) VM accessDescribe ways Azure encrypts dataDescribe security management capabilities of AzureDescribe Cloud security posture management (CSPM)Describe Microsoft Defender for CloudDescribe the enhanced security features of Microsoft Defender for CloudDescribe security baselines for AzureDescribe security capabilities of Microsoft SentinelDefine the concepts of SIEM and SOARDescribe how Microsoft Sentinel provides integrated threat managementDescribe threat protection with Microsoft 365 DefenderDescribe Microsoft 365 Defender servicesDescribe Microsoft Defender for Office 365Describe Microsoft Defender for EndpointDescribe Microsoft Defender for Cloud AppsDescribe Microsoft Defender for IdentityDescribe the Microsoft 365 Defender portalDescribe the capabilities of Microsoft compliance solutions (25-30%)Describe Microsoft's Service Trust Portal and privacy principlesDescribe the offerings of the Service Trust portalDescribe Microsoft's privacy principlesDescribe the compliance management capabilities of Microsoft PurviewDescribe the Microsoft Purview compliance portalDescribe compliance managerDescribe the use and benefits of compliance scoreDescribe information protection and data lifecycle management capabilities of Microsoft PurviewDescribe data classification capabilitiesDescribe the benefits of Content explorer and Activity explorerDescribe sensitivity labels and sensitivity label policiesDescribe Data Loss Prevention (DLP)Describe Records ManagementDescribe Retention Polices, Retention Labels and retention label policiesDescribe insider risk capabilities in Microsoft PurviewDescribe Insider Risk ManagementDescribe communication complianceDescribe information barriersDescribe resource governance capabilities in AzureDescribe Azure PolicyDescribe Azure BlueprintsDescribe the Microsoft Purview unified data governance solutionTake advantage of this opportunity to test your knowledge, identify areas that require further study, and sharpen your skills. At the end of the practice test, you'll feel confident and prepared to succeed in the SC-900 certification and stand out in the dynamic world of cybersecurity. Join us on this journey of learning and achievement!
