Microsoft · SC-100
Securing applications
SC-100 · Lesson 14 of 15 · 1:32:12
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SC-100 exam (Microsoft Certified: Cybersecurity Architect Expert). In this lesson: the application portfolio, threat modeling with STRIDE and the Security Development Lifecycle, managed identities and workload identity federation, API Management, Defender for APIs, and Azure Web Application Firewall. Includes three original practice questions.
Preview the topics
- An architect wants to find design flaws in a new payment service before any code is written. What should the team do first?
- A Kubernetes workload in another cloud must access an Azure storage account, without any stored secret. What should the architect use?
- A public web app is hit by SQL injection attempts, and the team wants them blocked at the global edge, before they reach the app. What fits?