Microsoft CyberSecurity Architect Certification Training

Course Outline for Microsoft Cybersecurity Architect Certification Training in Singapore

SECTION 1: Design solutions that align with security best practices and priorities

• Topic 1 Introduction to Zero Trust and best practice frameworks
  o Introduction to best practices
  o Introduction to Zero Trust
  o Zero Trust initiatives
  o Zero Trust technology pillars part 1
  o Zero Trust technology pillars part 2
• Topic 2 Design solutions that align with the Cloud Adoption Framework (CAF) and Well-Architected Framework (WAF)
  o Define a security strategy
  o Introduction to the Cloud Adoption Framework
  o Cloud Adoption Framework secure methodology
  o Introduction to Azure Landing Zones
  o Design security with Azure Landing Zones
  o Introduction to the Well-Architected Framework
  o The Well-Architected Framework security pillar
• Topic 3 Design solutions that align with the Microsoft Cybersecurity Reference Architecture (MCRA) and Microsoft cloud security benchmark (MCSB)
  o Introduction to Microsoft Cybersecurity Reference Architecture and cloud security benchmark
  o Design solutions with best practices for capabilities and controls
  o Design solutions with best practices for attack protection
• Topic 4 Design a resiliency strategy for common cyberthreats like ransomware
  o Common cyberthreats and attack patterns
  o Support business resiliency
  o Ransomware protection
  o Configurations for secure backup and restore
  o Security updates
• Topic 5 Case study: Design solutions that align with security best practices and priorities
  o Case study description
  o Case study answers
  o Conceptual walkthrough
  o Technical walkthrough

Section 2: Design security operations, identity, and compliance capabilities

• Topic 6 Design solutions for regulatory compliance
  o Introduction to regulatory compliance
  o Translate compliance requirements into a security solution
  o Address compliance requirements with Microsoft Purview
  o Address privacy requirements with Microsoft Priva
  o Address security and compliance requirements with Azure policy
  o Evaluate infrastructure compliance with Defender for Cloud
• Topic 7 Design security solutions for applications and data
  o Introduction to security for Exchange, Sharepoint, OneDrive and Teams
  o Evaluate security posture for collaboration and productivity workloads
  o Design a Microsoft 365 Defender solution
  o Design configurations and operational practices for Microsoft 365
• Topic 8 Design solutions for identity and access management
  o Introduction to Identity and Access Management
  o Design cloud, hybrid and multicloud access strategies (in-cluding Azure AD)
  o Design a solution for external identities
  o Design modern authentication and authorization strategies
  o Align conditional access and Zero Trust
  o Specify requirements to secure Active Directory Domain Ser-vices (AD DS)
  o Design a solution to manage secrets, keys, and certificates
• Topic 9 Design solutions for securing privileged access
  o Introduction to privileged access
  o The enterprise access model
  o Design identity governance solutions
  o Design a solution to secure tenant administration
  o Design a solution for cloud infrastructure entitlement management (CIEM)
  o Design a solution for privileged access workstations and bastion services
• Topic 10 Design solutions for security operations
  o Introduction to Security operations (SecOps)
  o Design security operations capabilities in hybrid and multicloud environments
  o Design centralized logging and auditing
  o Design security information and event management (SIEM) solutions
  o Design solutions for detection and response
  o Design a solution for security orchestration, automation, and response (SOAR)
  o Design security workflows
  o Design threat detection coverage
• Topic 11 Case study: Design security operations, identity and compliance capabilities
  o Case study description
  o Case study answers
  o Conceptual walkthrough
  o Technical walkthrough

Section 3: Design security solutions for applications and data

• Topic 12 Design solutions for securing Microsoft 365
  o Introduction to security for Exchange, Sharepoint, OneDrive and Teams
  o Evaluate security posture for collaboration and productivity workloads
  o Design a Microsoft 365 Defender solution
  o Design configurations and operational practices for Microsoft 365
• Topic 13 Design solutions for securing applications
  o Introduction to application security
  o Design and implement standards to secure application de-velopment
  o Evaluate security posture of existing application portfolios
  o Evaluate application threats with threat modeling
  o Design security lifecycle strategy for applications
  o Secure access for workload identities
  o Design a solution for API management and security
  o Design a solution for secure access to applications
• Topic 14 Design solutions for securing an organization’s data
  o Introduction to data security
  o Design a solution for data discovery and classification using Microsoft Purview
  o Design a solution for data protection
  o Design data security for Azure workloads
  o Design security for Azure Storage
  o Design a security solution with Microsoft Defender for SQL and Microsoft Defender for Storage
• Topic 15 Case study: Design security solutions for applications and data
  o Case study description
  o Case study answers
  o Conceptual walkthrough
  o Technical walkthrough

Section 4: Design security solutions for infrastructure

• Topic 16 Specify requirements for securing SaaS, PaaS, and IaaS services
  o Introduction to security for SaaS, PaaS, and IaaS
  o Specify security baselines for SaaS, PaaS, and IaaS services
  o Specify security requirements for web workloads
  o Specify security requirements for containers and container orchestration
• Topic 17 Design solutions for security posture management in hybrid and multicloud environments
  o Introduction to hybrid and multicloud posture management
  o Evaluate security posture by using Microsoft Cloud Security Benchmark
  o Design integrated posture management and workload protection
  o Evaluate security posture by using Microsoft Defender for Cloud
  o Posture evaluation with Microsoft Defender for Cloud secure score
  o Design cloud workload protection with Microsoft Defender for Cloud
  o Integrate hybrid and multicloud environments with Azure Arc
  o Design a solution for external attack surface management
• Topic 18 Design solutions for securing server and client endpoints
  o Introduction to endpoint security
  o Specify server security requirements
  o Specify requirements for mobile devices and clients
  o Specify internet of things (IoT) and embedded device security requirements
  o Secure operational technology (OT) and industrial control systems (ICS) with Microsoft Defender for IoT
  o Specify security baselines for server and client endpoints
  o Design a solution for secure remote access
• Topic 19 Design solutions for network security
  o Design solutions for network segmentation
  o Design solutions for traffic filtering with network security groups
  o Design solutions for network posture management
  o Design solutions for network monitoring
• Topic 20 Case study: Design security solutions for infrastructure
  o Case study description
  o Case study answers
  o Conceptual walkthrough
  o Technical walkthrough