Microsoft · SC-100
Security operations
SC-100 · Lesson 4 of 15 · 25:46
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SC-100 exam (Microsoft Certified: Cybersecurity Architect Expert). In this lesson: Microsoft Defender XDR and Microsoft Sentinel together, centralized logging with Log Analytics and Purview Audit, automation with automation rules and Logic Apps playbooks, and threat coverage with MITRE ATT&CK. Includes three original practice questions.
Preview the topics
- An investigator needs to know who changed a SharePoint sharing setting eight months ago, and the organization only has Audit Standard. What’s the problem?
- When a high-severity incident involves a compromised account, the SOC wants the account disabled and a ticket opened, automatically. What should the architect design?
- A CISO asks which attacker techniques the current detections do not cover. What should the team review?