Chapter 3 of 4 · Microsoft SC-900
Capabilities of Microsoft Security Solutions
Azure network security, Key Vault, Defender for Cloud, Microsoft Sentinel and Defender XDR.
- 5topics
- 27 minfast track
- 2diagrams and exhibits
- 35–40%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Azure DDoS Protection, Firewall and WAFSC-900 Azure network protection: DDoS Protection tiers, Azure Firewall with FQDN filtering and Firewall Manager, and Web…5 min
- 2Network Segmentation, NSGs, Bastion and Key VaultSC-900 Azure network controls: segmentation with virtual networks, NSG rules, Azure Bastion for safe admin access, and Key Vault…6 min
- 3Defender for Cloud and CSPMSC-900 Microsoft Defender for Cloud: cloud security posture management, secure score, recommendations, regulatory compliance and…5 min
- 4Microsoft SentinelSC-900 Microsoft Sentinel: SIEM and SOAR defined, data connectors, analytics rules, incidents, hunting, workbooks and playbooks…Diagram5 min
- 5Microsoft Defender XDRSC-900 Microsoft Defender XDR: Defender for Office 365, Endpoint, Identity and Cloud Apps, Vulnerability Management, Threat…Diagram6 min
About this chapter
What this chapter covers
This is the largest domain of the exam, at 35 to 40 percent. It covers the Microsoft products that protect networks and resources in Azure, watch for threats, and respond to attacks across email, devices, identities and cloud apps.
The questions nearly always give a task and ask which product does it, so the main skill is telling similar products apart.
How the topics fit together
The pages move from preventing attacks to detecting and responding to them.
- Azure DDoS Protection, Firewall and WAF covers the services that defend the edge of a network and web applications.
- Network segmentation, NSGs, Bastion and Key Vault covers limiting traffic, safe administrative access and storing secrets.
- Defender for Cloud and CSPM covers posture management, secure score and workload protection.
- Microsoft Sentinel covers the cloud native SIEM and SOAR.
- Microsoft Defender XDR covers the family of Defender products and the Defender portal.
Build a one line summary for each product, for example "Sentinel collects and correlates data from many sources" and "Defender for Cloud improves the security posture of cloud workloads". Most questions are answered by that line.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with examples and tables.
- What to remember for the exam: the facts to memorise and how questions are phrased.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Ready for more practice?
The full Microsoft SC-900 question bank has 503 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by Microsoft. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.