Microsoft · SC-900
Security and compliance concepts
SC-900 · Lesson 1 of 15 · 3:43
YouTube loads only after you press play. Watch on YouTube ↗
In this lesson
Prepare for the SC-900 exam (Microsoft Security, Compliance, and Identity Fundamentals). In this lesson: the shared responsibility model in IaaS, PaaS and SaaS (and for AI), defense in depth and its seven layers, the CIA triad, Zero Trust (verify explicitly, least privilege, assume breach, and its seven pillars), symmetric and asymmetric encryption, encryption at rest, in transit and in use, hashing and salting, and governance, risk and compliance, with data residency, sovereignty and privacy. Includes three original practice questions.
Preview the topics
- A company runs one app on virtual machines, another on a platform as a service offering, and it uses a software as a service CRM. For which one does it still patch the operating system?
- A network security group blocks all traffic from the web subnet to the database subnet, except the one port the app needs. Which layer of defense in depth is this?
- A website stores passwords so that two users with the same password end up with different stored values, and nobody can turn a stored value back into the password. What is it doing?