• 1. Describe threat detection and mitigation capabilities in Microsoft Sentinel
• 2. Define the concepts of SIEM, SOAR, XDR
• 3. Describe Microsoft Security Exposure Management

– Describe Microsoft Security Copilot

• 1. Describe the benefits of Security Copilot
• 2. Describe the key features of Security Copilot

– Describe the capabilities of Microsoft security solutions

• 1. Describe Microsoft Defender for Cloud
• 2. Describe Microsoft Defender XDR
• 3. Describe Microsoft Defender for Cloud Apps
• 4. Describe Microsoft Defender Vulnerability Management
• 5. Describe Microsoft Defender for Endpoint
• 6. Describe Microsoft Defender for Office 365
• 7. Describe Microsoft Defender for Identity

– Describe security management capabilities of Azure

• 1. Describe Azure compute and infrastructure security
• 2. Describe Azure network security

• 1. Describe sensitivity labels and sensitivity label policies
• 2. Describe retention policies, retention labels, and retention label policies
• 3. Describe data loss prevention (DLP)
• 4. Describe the data classification capabilities
• 5. Describe the benefits of Content explorer and Activity explorer
• 6. Describe records management

– Describe insider risk, eDiscovery, and audit capabilities in Microsoft Purview

• 1. Describe eDiscovery solutions
• 2. Describe audit capabilities
• 3. Describe insider risk management

– Describe Microsoft Service Trust Portal and privacy capabilities

• 1. Describe the Service Trust Portal
• 2. Describe privacy management

– Describe the capabilities of the Microsoft Purview compliance portal

• 1. Describe compliance manager and compliance score
• 2. Describe the compliance portal

• 1. Describe Microsoft Entra ID Protection
• 2. Describe self-service password reset
• 3. Describe Windows Hello for Business
• 4. Describe the different authentication methods
• 5. Describe password protection and management
• 6. Describe multifactor authentication (MFA)

– Describe the identity governance and life cycle management capabilities of Microsoft Entra

• 1. Describe access reviews
• 2. Describe the capabilities of Microsoft Entra ID Governance
• 3. Describe identity governance
• 4. Describe entitlement management
• 5. Describe the capabilities of Privileged Identity Management (PIM)

– Describe the core identity services and types of identities

• 1. Describe the concept of directory synchronization
• 2. Describe Microsoft Entra ID
• 3. Describe types of identities (users, devices, groups, service principals)
• 4. Describe hybrid identity

– Describe access management capabilities of Microsoft Entra

• 1. Describe Conditional Access
• 2. Describe global secure access capabilities
• 3. Describe the benefits of Azure RBAC
• 4. Describe the concepts of Zero Trust

• 1. Describe the concept of directory services and Active Directory
• 2. Describe the role of the identity provider
• 3. Define identity as the primary security perimeter
• 4. Define authentication and authorization
• 5. Describe the concept of federation

– Describe security and compliance concepts

• 1. Describe Governance, Risk, and Compliance (GRC) concepts
• 2. Describe the shared responsibility model
• 3. Describe encryption and hashing
• 4. Describe the Zero Trust model
• 5. Describe defense in depth