• Design a logging and auditing security strategy.
• Develop security operations for hybrid and multicloud environments.
• Design a strategy for Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR).
• Evaluate security workflows.
• Review security strategies for incident management.
• Evaluate security operations for technical threat intelligence.
• Monitor sources for insights on threats and mitigations.

• Recommend an identity store for security.
• Recommend secure authentication and security authorization strategies.
• Secure conditional access.
• Design a strategy for role assignment and delegation.
• Define Identity governance for access reviews and entitlement management.
• Design a security strategy for privileged role access to infrastructure.
• Design a security strategy for privileged access.

• Interpret compliance requirements and their technical capabilities.
• Evaluate infrastructure compliance by using Microsoft Defender for Cloud.
• Interpret compliance scores and recommend actions to resolve issues or improve security.
• Design and validate implementation of Azure Policy.
• Design for data residency Requirements.
• Translate privacy requirements into requirements for security solutions.

• Evaluate security postures by using benchmarks.
• Evaluate security postures by using Microsoft Defender for Cloud.
• Evaluate security postures by using Secure Scores.
• Evaluate security hygiene of Cloud Workloads.
• Design security for an Azure Landing Zone.
• Interpret technical threat intelligence and recommend risk mitigations.
• Recommend security capabilities or controls to mitigate identified risks.

• Plan and implement a security strategy across teams.
• Establish a strategy and process for proactive and continuous evolution of a security strategy.

• Design a logging and auditing security strategy.
• Develop security operations for hybrid and multicloud environments.
• Design a strategy for Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR).
• Evaluate security workflows.
• Review security strategies for incident management.
• Evaluate security operations for technical threat intelligence.
• Monitor sources for insights on threats and mitigations.

• Specify security baselines for SaaS, PaaS and IaaS services.
• Specify security requirements for web, storage, data and IoT workloads.
• Specify security requirements for containers and container orchestration.

• Use the Microsoft Cybersecurity Reference Architecture (MCRA) to recommend security best practices
• Use Microsoft Cloud Security Benchmarks to recommend security best practices
• Use the Zero Trust Rapid Modernization Plan (RaMP) to recommend a strategy for updating organizational security

• Recommend a DevSecOps process
• Recommend a methodology for asset protection
• Recommend strategies for managing and minimizing risk

• Recognize different types of ransomware
• Help an organization mitigate risk of a ransomware attack by creating a recovery plan
• Help an organization mitigate risk of a ransomware attack by limiting the scope of damage
• Help an organization mitigate risk of a ransomware attack by hardening key infrastructure elements

The prerequisites for taking the SC 100 exam are:

• Advanced experience and knowledge in a wide range of security engineering areas, including identity and access, platform protection, security operations, securing data, and securing applications.
• Experience with hybrid and cloud implementations.

The best resources for preparing for the SC100 exam are:

• The official Microsoft SC100 study guide
• Microsoft Learn modules on Zero Trust, GRC, SecOps, and data and applications
• Practice exams from Microsoft and other third-party vendors

The amount of time it takes to prepare for the SC-100 exam will vary depending on your experience and knowledge of the topics covered on the exam. However, most people find that it takes 2-4 weeks of focused study to pass the exam.

The SC 100 certification demonstrates your skills in designing and evaluating cybersecurity strategies. This certification can help you advance your career in security architecture or cybersecurity.