"This SC-900 (MS Security, Compliance and Identity Fundamentals) is an dedicated certification exam designed by MS for individuals or professionals who want to excel their career into the compliance and cyber security and would like to understand about Microsoft cloud based security services".

Entire course is divided into 4 Major parts given below and each part is then divided into several several modules which are recommended as per Microsoft.

1: Describe the concepts of security, compliance, and identity

2: Describe the capabilities of Microsoft Identity and access management solutions

3: Describe the capabilities of Microsoft security solutions

4: Describe the capabilities of Microsoft compliance solutions

SC-900 part 1: Describe the concepts of security, compliance, and identity

PART 1: MODULE1 - Describe security concepts and methodologies

In this module, you will learn about security concepts and methodologies. One will learn about the Zero Trust methodology, and guiding principles like verify explicitly, least privilege access, and assume breach strengthens security. You will learn about the six foundational elements of identity, devices, applications, data, and networks are used in the Zero Trust model.

In this module you will also learn about shared responsibility model, which considers who is responsible for what as organizations migrate their workloads to the cloud. You will also learned about defense in depth, and how the security principles of confidentiality, integrity, and availability help to guide security decisions.

PART 1: MODULE2 - Describe Microsoft security and compliance principles

In this module you will learn about Microsoft’s six privacy principles, and how they guide security strategy. You Will also learn about the Service Trust Portal, as well as where to find compliance and regulatory documentation for Azure.

SC-900 PART 2: Describe the capabilities of Microsoft Identity and access management solutions

1) PART 2: MODULE1 - Describe identity principles and concepts

In this module you will learn about basic identity concepts like identity as a security perimeter, authentication, authorization, the role of active directory and the concept of federated services.

2) PART 2: MODULE2 - Explore the services and identity types of Azure AD

In this module, you will learn about the benefits of using a cloud-based identity provider, including single sign-on for users. You will learn about Azure AD pricing models, various identity types supported by Azure AD, and how you can use it to support external users.

3) PART 2: MODULE3 - Explore the authentication capabilities of Azure AD

In this module, you will learn about the authentication capabilities of Azure AD. In addition to that you will learn how multi-factor authentication improves security. You will also learn about password protection and management capabilities of Azure AD.

4) PART 2: MODULE4 - Explore the access management capabilities of Azure AD

In this module, you will learn how Azure AD uses intelligent access management capabilities to protect organizational assets and one will also learn how Conditional Access can help in improving security. You will understand how to use Azure AD roles to control access to Azure AD resources in a directory.

5) PART 2: MODULE5 - Describe the identity protection and governance capabilities of Azure AD

In this module you will learn about Azure AD provides identity protection and governance capabilities, use cases, and its various benefits.

SC-900 PART 3: Describe the capabilities of Microsoft security solutions

1) PART 3: MODULE1 - Describe basic security capabilities in Azure

In this module one will explore about many different services and features of Azure that can help to protect networks, assets, and resources, including network security groups, Azure Firewall, and Azure DDoS protection. One will also learn about different ways in which encryption can used to protect data.

2) PART 3: MODULE2 - Describe security management capabilities of Azure

In this module one will explore the capabilities and benefits of using Azure Security Center. You will learn Azure secure score and how you can check your organization security score and its compliance readiness. You will learn how azure Defender can help to protect organization's assets and its resources. You will also understand the use of cloud security posture management (CSMP) and understand the security baseline in Azure.

3) PART 3: MODULE3 - Describe security capabilities of Azure Sentinel

In this module you will learn about the different security defenses that are available in Sentinel to protect your company environment. You will learn how Azure Sentinel provides a single solution for alert detection, threat visibility, proactive hunting, and threat response and Azure sentinel licensing model.

4) PART 3: MODULE4 - Describe threat protection with Microsoft 365 Defender

In this module one will understand how Microsoft Defender service can help protect organization information. You will how each different defender service and how it can protect: Identity, Office 365, Endpoint, and cloud apps.

5) PART 3: MODULE5 - Describe security management capabilities of Microsoft 365

In this module you will learn about below concepts

1. Describe and explore Microsoft 365 security center.

2. Describe how to use Microsoft Secure Score.

3. Explore security reports and dashboards.

4. Describe incidents and incident management capabilities.

6) PART 3: MODULE6 - Describe endpoint security with Microsoft Intune

In this module you will learn what Intune is and how it can be used for Endpoints Security and how to manage devices with Microsoft Endpoint Manager.

SC-900 PART 4: Describe the capabilities of Microsoft compliance solutions

1) PART 4: MODULE1 - Describe the compliance management capabilities in Microsoft

In this module you will learn about the common compliance needs for an organizations. You will learn how solutions like the Microsoft 365 compliance center and the Compliance Manager can help to manage compliance and how they can help to simplify compliance for an organization.

2) PART 4: MODULE2 - Describe information protection and governance capabilities of Microsoft 365

In this module, you will learn about how Microsoft solutions and capabilities like data classification, records management, and data loss prevention, can help you organizations to implement information protection and governance.

3) PART 4: MODULE3 - Describe insider risk capabilities in Microsoft 365

In this module you will learn how Microsoft 365 capabilities like insider risk management, communication compliance, information barriers, (PAM) privileged access management, and Customer Lockbox can help you protect your organization.

4) PART 4: MODULE4 - Describe the E-Discovery capabilities of Microsoft 365

In this module, you will learn about the e-Discovery capabilities in Microsoft 365 and understand concepts mentioned below

1. Describe the purpose of eDiscovery.

2. Describe the capabilities of the content search tool.

3. Describe the core eDiscovery workflow.

4. Describe the advanced eDiscovery workflow.

5) PART 4: MODULE5 - Describe the audit capabilities in Microsoft 365

In this module, you will get introduction about core and advanced auditing capabilities of Microsoft 365. Mainly one will learn about below mentioned concepts.

1. Describe the core audit capabilities of Microsoft 365.

2. Describe the purpose and value of Advanced Auditing.

6) PART 4: MODULE6 - Describe resource governance capabilities in Azure

In this module one will learn about resource governance capabilities available in Azure. Mainly one will learn about below mentioned concepts.

1. Describe some of the resource governance capabilities in Azure.

2. Describe the cloud adoption framework.

Updates: April 2021

Update Lectures on Cloud CSPM - Cloud Security Posture Management