Module 1: Build an Overall Security Strategy and Architecture

• Introduction
• Zero Trust overview
• Develop integration points in an architecture
• Develop security requirements based on business goals
• Translate security requirements into technical capabilities
• Design security for a resiliency strategy
• Design a security strategy for hybrid and multi-tenant environments
• Design technical and governance strategies for traffic filtering and segmentation
• Understand security for protocols
• Exercise: Build an overall security strategy and architecture
• Knowledge check
• Summary

Module 2: Design a Security Operations Strategy

• Introduction
• Understand security operations frameworks, processes, and procedures
• Design a logging and auditing security strategy
• Develop security operations for hybrid and multi-cloud environments
• Design a strategy for Security Information and Event Management (SIEM) and Security Orchestration
• Evaluate security workflows
• Review security strategies for incident management
• Evaluate security operations strategies for sharing technical threat intelligence
• Monitor sources for insights on threats and mitigations

Module 3: Design an Identity Security Strategy

• Introduction
• Secure access to cloud resources
• Recommend an identity store for security
• Recommend secure authentication and security authorization strategies
• Secure conditional access
• Design a strategy for role assignment and delegation
• Define identity governance for access reviews and entitlement management
• Design a security strategy for privileged role access to infrastructure
• Design a security strategy for privileged activities
• Understand security for protocols

Module 4: Evaluate a Regulatory Compliance Strategy

• Introduction
• Interpret compliance requirements and their technical capabilities
• Evaluate infrastructure compliance by using Microsoft Defender for Cloud
• Interpret compliance scores and recommend actions to resolve issues or improve security
• Design and validate implementation of Azure policy
• Design for data residency requirements
• Translate privacy requirements into requirements for security solutions

Module 5: Evaluate Security Posture and Recommend Technical Strategies to Manage Risk

• Introduction
• Evaluate security postures by using benchmarks
• Evaluate security postures by using Microsoft Defender for Cloud
• Evaluate security postures by using secure scores
• Evaluate security hygiene of cloud workloads
• Design security for an Azure Landing Zone
• Interpret technical threat intelligence and recommend risk mitigations
• Recommend security capabilities or controls to mitigate identified risks

Module 6: Understand Architecture Best Practices and How They are Changing with the Cloud

• Introduction
• Plan and implement a security strategy across teams
• Establish a strategy and process for proactive and continuous evolution of a security strategy
• Understand network protocols and best practices for network segmentation and traffic filtering

Module 7: Design a Strategy for Securing Server and Client Endpoints

• Introduction
• Specify security baselines for server and client endpoints
• Specify security requirements for servers
• Specify security requirements for mobile devices and clients
• Specify requirements for securing Active Directory Domain Services
• Design a strategy to manage secrets, keys, and certificates
• Design a strategy for secure remote access
• Understand security operations frameworks, processes, and procedures
• Understand deep forensics procedures by resource type

Module 8: Design a Strategy for Securing PaaS, IaaS, and SaaS Services

• Introduction
• Specify security baselines for PaaS services
• Specify security baselines for IaaS services
• Specify security baselines for SaaS services
• Specify security requirements for IoT workloads
• Specify security requirements for data workloads
• Specify security requirements for web workloads
• Specify security requirements for storage workloads
• Specify security requirements for containers
• Specify security requirements for container orchestration

Module 9: Specify Security Requirements for Applications

• Introduction
• Understand application threat modeling
• Specify priorities for mitigating threats to applications
• Specify a security standard for onboarding a new application
• Specify a security strategy for applications and APIs

Module 10: Design a Strategy for Securing Data

• Introduction
• Prioritize mitigating threats to data
• Design a strategy to identify and protect sensitive data
• Specify an encryption standard for data at rest and in motion