You're reading from Microsoft Security, Compliance, and Identity Fundamentals Exam Ref SC-900

Product type Book

Published in May 2022

Publisher Packt

ISBN-13 9781801815994

Pages 404 pages

Edition 1st Edition

Languages

Concepts

Cloud Security

Author (1):

Dwayne Natwick

Table of Contents (24) Chapters

Preface

1. Section 1: Exam Overview

2. Chapter 1: Preparing for Your Microsoft Exam

3. Section 2: The Key Concepts of Security, Compliance, and Identity

4. Chapter 2: Describing Security Methodologies

5. Chapter 3: Understanding Key Security Concepts

6. Chapter 4: Key Microsoft Security and Compliance Principles

7. Section 3: The Microsoft Identity Management Solutions

8. Chapter 5: Defining Identity Principles/Concepts and the Identity Services within Azure AD

9. Chapter 6: Describing the Authentication and Access Management Capabilities of Azure AD

10. Chapter 7: Describing the Identity Protection and Governance Capabilities of Azure AD

11. Section 4: The Microsoft Security Solutions for Microsoft 365 and Azure

12. Chapter 8: Describing Basic Security Services and Management Capabilities in Azure

13. Chapter 9: Describing Security Management and Capabilities of Azure

14. Chapter 10: Describing Threat Protection with Microsoft 365 Defender

15. Chapter 11: Describing the Security Capabilities of Microsoft Sentinel

16. Chapter 12: Describing Security Management and the Endpoint Security Capabilities of Microsoft 365

17. Section 5: The Microsoft Compliance Monitoring Capabilities within Microsoft 365 and Azure

18. Chapter 13: Compliance Management Capabilities in Microsoft

19. Chapter 14: Describing Information Protection and Governance Capabilities of Microsoft 365

20. Chapter 15: Describing Insider Risk, eDiscovery, and Audit Capabilities in Microsoft 365

21. Chapter 16: Describing Resource Governance Capabilities in Azure

22. Chapter 17: Final Assessment/ Mock Exam

23. Other Books You May Enjoy

Describing Azure AD

Azure AD is a cloud-based identity provider that is used for all Microsoft cloud services, including Microsoft 365 and Microsoft Azure. Unlike Windows Active Directory, which utilizes Kerberos or LDAP for directory services, Azure AD utilizes the industry-recognized cloud protocols, SAML and WS-Federation. This allows Azure AD to be utilized as an identity provider for other cloud-native applications outside those created by Microsoft:

Figure 6.1 – Azure AD for cloud identity

There are four Azure AD editions that you should understand. They are as follows:

Free Azure AD is enabled whenever a Microsoft account is created. If you have outlook.com, you have an Azure AD account.
Office 365 Apps is created when you subscribe to Office 365.
Premium P1 is used for business-level and enterprise-level Azure AD subscriptions. This is part of Microsoft 365 Business Premium and Office/Microsoft 365 E3.
Premium P2 provides...