Introduction

In this course you will learn how to secure user access to your organization’s resources. The course covers user password protection, multi-factor authentication, how to enable Azure Identity Protection, how to setup and use Azure AD Connect, and introduces you to conditional access in Microsoft 365. You will learn about threat protection technologies that help protect your Microsoft 365 environment. You will learn about Secure Score, Exchange Online protection, Azure Advanced Threat Protection, Windows Defender Advanced Threat Protection, and threat management.

Course Objectives

After completing this course, learners should be able to:

• Administer user and group access in Microsoft 365.

• Explain and manage Azure Identity Protection.

• Plan and implement Azure AD Connect.

• Manage synchronized user identities.

• Explain and use conditional access.

• Describe cyber-attack threat vectors.

• Explain security solutions for Microsoft 365.

• Use Microsoft Secure Score to evaluate and improve your security posture.

• Configure various advanced threat protection services for Microsoft 365.

• Plan for and deploy secure mobile devices.

• Implement information rights management.

• Secure messages in Office 365.

• Configure Data Loss Prevention policies.

• Deploy and manage Cloud App Security.

• Implement Windows information protection for devices.

• Plan and deploy a data archiving and retention system.

• Create and manage an eDiscovery investigation.

• Manage GDPR data subject requests.

• Explain and use sensitivity labels

Target Audience

The Microsoft 365 Security administrator collaborates with the Microsoft 365 Enterprise Administrator, business stakeholders and other workload administrators to plan and implement security strategies and to ensures that the solutions comply with the policies and regulations of the organization. This role proactively secures Microsoft 365 enterprise environments. Responsibilities include responding to threats, implementing, managing and monitoring security and compliance solutions for the Microsoft 365 environment. They respond to incidents, investigations and enforcement of data governance. The Microsoft 365 Security administrator is familiar with Microsoft 365 workloads and hybrid environments. This role has strong skills and experience with identity protection, information protection, threat protection, security management and data governance.

Course Outlines

Day 1: Identity, Access Management & Zero Trust

User and Group Management
Identity and Access Management Concepts
Zero Trust Model
Identity and Authentication Planning
User Accounts and Roles
Password Management
Identity Synchronization Concepts
Directory Synchronization Planning
Synchronized Identity Configuration
Azure AD Identity Protection
Role-Based Access Control (RBAC)
Identity Governance Basics

Day 2: Advanced Identity & Access Control

Application Management
Manage Device Access
Solutions for External Access
Privileged Identity Management (PIM)
Manage Identity Lifecycle
Security in Microsoft 365 Overview
Identity Governance Policies
Hybrid Identity Scenarios
Access Control Strategies

Day 3: Microsoft Security & Threat Protection

Threat Vectors and Data Breaches
Security Strategy and Principles
Microsoft Security Solutions Overview
Secure Score
Threat Protection Overview
Exchange Online Protection (EOP)
Microsoft Defender for Office 365
Safe Attachments and Safe Links
Microsoft Defender for Identity
Microsoft Defender for Endpoint
Threat Management and Investigation
Security Dashboard and Response
Advanced Threat Analytics (ATA)
Azure Sentinel Introduction

Day 4: Cloud App Security & Device Management

Microsoft Cloud App Security (Defender for Cloud Apps)
Deploy Cloud App Security
Mobile Application Management (MAM)
Mobile Device Management (MDM)
Device Enrollment and Management
Conditional Access and Device Policies
Cloud Application Monitoring
Mobile Security Strategy
Endpoint and Device Compliance

Day 5: Information Protection, Compliance & DLP

Information Protection Concepts
Governance and Records Management
Sensitivity Labels
Microsoft 365 Retention Policies
Archiving in Microsoft 365 and Exchange
Information Rights Management (IRM)
S/MIME and Email Encryption
Office 365 Message Encryption
Insider Risk Management
Information Barriers
Advanced eDiscovery
Data Loss Prevention (DLP) Fundamentals
Create and Customize DLP Policies
Policy Tips and Enforcement
Content Search and Audit Logs