Microsoft Identity and Access Administrator Associate (SC-300) Cert Prep by Microsoft Press
7h 3mIntermediate2024-01-16
Authors
Microsoft Press
Microsoft
Tim Warner
Technical Trainer and Content Developer
Course details
Identity and access management is one of the most important areas of cloud computing—every sign-on request into Microsoft Azure is authenticated, and every resource access attempt is subject to authorization. The Microsoft Identity and Access Administrator certification is one of the best ways to prove your skills and knowledge in designing, implementing, and managing an identity and access management solution with Entra ID (formerly Azure Active Directory). In this course, Microsoft MVP Tim Warner guides through the objectives of the SC-300 exam. Learn how to plan and implement identities, authentication and access management, identity governance, conditional access, and more. Plus, learn how to integrate enterprise applications, plan and implement application registrations, manage access reviews, and configure privileged access. If you’re ready to achieve your next cybersecurity career milestone, join Tim in this course.
Skills covered
Creator ContentIdentity and Access ManagementCybersecurity
Concepts
1. Configure and Manage a Microsoft Entra Tenant
- 01 - Objectives
- 02 - Configure and manage Microsoft Entra ID roles
- 03 - Configure delegation by using administrative units
- 04 - Analyze Microsoft Entra ID role permissions
- 05 - Configure and manage custom domains
- 06 - Configure tenant-wide settings
2. Create, Configure, and Manage Microsoft Entra Identities
- 07 - Objectives
- 08 - Create, configure, and manage users
- 09 - Create, configure, and manage groups
- 10 - Configure and manage device join and registration, including writeback
- 11 - Assign, modify, and report on licenses
3. Implement and Manage Identities for External Users and Tenants
- 12 - Objectives
- 13 - Manage external collaboration settings in Microsoft Entra ID
- 14 - Invite external users, individually or in bulk
- 15 - Manage external user accounts in Microsoft Entra ID
- 16 - Configure identity providers, including SAML or WS-Fed
4. Implement and Manage Hybrid Identity
- 17 - Objectives
- 18 - Implement and manage Microsoft Entra Connect
- 19 - Implement and manage Microsoft Entra Connect cloud sync
- 20 - Implement and manage password hash synchronization
- 21 - Implement and manage pass-through authentication
- 22 - Implement and manage seamless single sign-on
- 23 - Implement and manage federation, excluding manual AD FS deployments
- 24 - Implement and manage Microsoft Entra Connect Health
- 25 - Troubleshoot synchronization errors
5. Plan, Implement, and Manage Azure MFA and Self-Service Password Reset
- 26 - Objectives
- 27 - Plan Azure MFA deployment, excluding MFA Server
- 28 - Configure and deploy SSPR
- 29 - Implement and manage Azure MFA settings
- 30 - Manage MFA settings for users
- 31 - Extend Azure MFA to third party and on-premises devices
- 32 - Monitor Azure MFA activity
6. Plan, Implement, and Manage Microsoft Entra ID User Authentication
- 33 - Objectives
- 34 - Plan for authentication
- 35 - Implement and manage authentication protocols
- 36 - Implement and manage Windows Hello for Business
- 37 - Implement and manage password protection and smart lockout
- 38 - Implement certificate-based authentication in Microsoft Entra ID
- 39 - Configure Microsoft Entra ID user authentication for Windows and Linux VMs on Azure
7. Plan, Implement, and Manage Microsoft Entra ID Conditional Access
- 40 - Objectives
- 41 - Plan Conditional Access policies
- 42 - Implement Conditional Access policy assignments
- 43 - Implement Conditional Access policy controls
- 44 - Test and troubleshoot Conditional Access policies
- 45 - Implement session management
- 46 - Implement device-enforced restrictions
- 47 - Implement continuous access evaluation
- 48 - Create a Conditional Access policy from a template
8. Manage Entra ID Identity Protection
- 49 - Objectives
- 50 - Implement and manage a user risk policy
- 51 - Implement and manage a sign-in risk policy
- 52 - Implement and manage an MFA registration policy
- 53 - Monitor, investigate, and remediate risky users
- 54 - Implement security for workload identities
9. Implement Access Management for Azure Resources
- 55 - Objectives
- 56 - Assign Azure roles
- 57 - Configure custom Azure roles
- 58 - Create and configure managed identities
- 59 - Use managed identities to access Azure resources
- 60 - Analyze Azure role permissions
- 61 - Configure Azure Key Vault RBAC and policies
10. Manage and Monitor Application Access by Using Microsoft Defender for Cloud Apps
- 62 - Objectives
- 63 - Discover and manage apps by using Microsoft Defender for Cloud Apps
- 64 - Configure connectors to apps
- 65 - Implement application-enforced restrictions
- 66 - Configure Conditional Access app control
- 67 - Create access and session policies in Microsoft Defender for Cloud Apps
- 68 - Implement and manage policies for OAuth apps
11. Plan, Implement, and Monitor the Integration of Enterprise Applications
- 69 - Objectives
- 70 - Configure and manage user and admin consent
- 71 - Discover apps by using AD FS application activity reports
- 72 - Design and implement access management for apps
- 73 - Design and implement app management roles
- 74 - Monitor and audit activity in enterprise applications
- 75 - Design and implement integration for on-premises apps by using Microsoft Entra ID application proxy
- 76 - Design and implement integration for SaaS apps
- 77 - Provision and manage users, groups, and roles on Enterprise applications
- 78 - Create and manage application collections
12. Plan and Implement Application Registrations
- 79 - Objectives
- 80 - Plan for application registrations
- 81 - Implement application registrations
- 82 - Configure application permissions
- 83 - Implement application authorization
- 84 - Plan and configure multi-tier application permissions
- 85 - Manage and monitor applications by using app governance
13. Plan and Implement Entitlement Management
- 86 - Objectives
- 87 - Plan entitlements
- 88 - Create and configure catalogs
- 89 - Create and configure access packages
- 90 - Manage access requests
- 91 - Implement and manage terms of use
- 92 - Manage the lifecycle of external users in Microsoft Entra Governance settings
- 93 - Configure and manage connected organizations
- 94 - Review per-user entitlements by using entitlement management
14. Plan, Implement, and Manage Access Reviews
- 95 - Objectives
- 96 - Plan for access reviews
- 97 - Create and configure access reviews for groups and apps
- 98 - Create and configure access review programs
- 99 - Monitor access review activity
- 100 - Respond to access review activity, including automated and manual responses
15. Plan and Implement Privileged Access
- 101 - Objectives
- 102 - Plan and manage Azure roles in Privileged Identity Management (PIM), including settings and assignments
- 103 - Plan and manage Azure resources in PIM, including settings and assignments
- 104 - Plan and configure Privileged Access groups
- 105 - Manage PIM requests and approval process
- 106 - Analyze PIM audit history and reports
- 107 - Create and manage break-glass accounts
16. Monitor Microsoft Entra ID
- 108 - Objectives
- 109 - Design a strategy for monitoring Microsoft Entra ID
- 110 - Review and analyze sign-in, audit, and provisioning logs by using the Microsoft Entra ID console
- 111 - Configure diagnostic settings, including Log Analytics, storage accounts, and Event Hub
- 112 - Monitor Microsoft Entra ID by using Log Analytics, including KQL queries
- 113 - Analyze Microsoft Entra ID by using workbooks and reporting in the Microsoft Entra ID console
- 114 - Monitor and improve the security posture by using the identity secure score