Chapter 1 of 4 · Microsoft SC-100
Design solutions that align with security best practices and priorities
Ransomware resiliency, MCRA, MCSB, Zero Trust, CAF, Well-Architected, landing zones and secure AI.
- 4topics
- 20 minfast track
- 1diagrams and exhibits
- 20–25%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Ransomware Resiliency and Business ContinuitySC-100 resiliency: prioritizing business-critical assets, secure backup and BCDR for hybrid and multicloud, ransomware defense…Diagram6 min
- 2MCRA, MCSB and Zero Trust Aligned SolutionsSC-100 frameworks: the MCRA, Microsoft Cloud Security Benchmark domains, Zero Trust principles, and insider, external and supply…5 min
- 3Cloud Adoption Framework, Well-Architected and Landing ZonesSC-100 governance: Cloud Adoption Framework stages, the Well-Architected security pillar, Azure landing zones, management groups…4 min
- 4Secure AI Adoption and DevSecOpsSC-100 AI and DevSecOps: discovering and governing AI use, data and identity protection for AI, AI threat protection, and a CAF…5 min
About this chapter
What this chapter covers
A security architect does not start with a product. They start with the business, its most valuable assets and the frameworks that describe good practice. This domain is worth 20 to 25 percent of the exam. It covers designing a resiliency strategy for ransomware and other attacks, aligning solutions with the Microsoft Cybersecurity Reference Architectures (MCRA), the Microsoft Cloud Security Benchmark (MCSB) and Zero Trust, and aligning governance with the Cloud Adoption Framework (CAF), the Well-Architected Framework (WAF), landing zones, secure AI adoption and DevSecOps.
The key skill is turning a business risk into a prioritized design, and naming the framework or control that supports each choice.
How the topics fit together
- Ransomware resiliency and business continuity covers prioritizing threats, BCDR, ransomware defenses and security updates.
- MCRA, MCSB and Zero Trust aligned solutions covers the reference architectures, benchmark domains and insider, external and supply chain attacks.
- Cloud Adoption Framework, Well-Architected and landing zones covers governance design on Azure.
- Secure AI adoption and DevSecOps covers securing AI and building security into delivery.
When a question names a framework, answer with that framework's own vocabulary. CAF is about stages and governance, WAF is about pillars and workload quality, MCSB is about control domains.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with examples and tables.
- What to remember for the exam: the facts to memorise and how questions are phrased.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Ready for more practice?
The full Microsoft SC-100 question bank has 770 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by Microsoft. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.