- Duration: Flexible
Course details
The Microsoft cybersecurity architect has subject matter expertise in designing and evolving the cybersecurity strategy to protect an organization's mission and business processes across all aspects of the enterprise architecture. The cybersecurity architect designs a Zero Trust strategy and architecture, including security strategies for data, applications, access management, identity, and infrastructure. The cybersecurity architect also evaluates Governance Risk Compliance (GRC) technical strategies and security operations strategies.
The cybersecurity architect continuously collaborates with leaders and practitioners in IT security, privacy, and other roles across an organization to plan and implement a cybersecurity strategy that meets the business needs of an organization.
A candidate for this exam should have advanced experience and knowledge in a wide range of security engineering areas including identity and access, platform protection, security operations, securing data and securing applications. They should also have experience with hybrid and cloud implementations.
Design solutions that align with security best practices and priorities (2025%)
Design a resiliency strategy for ransomware and other attacks based on Microsoft Security Best Practices
Design a security strategy to support business resiliency goals, including identifying and prioritizing threats to business-critical assets
Design solutions that align with Microsoft ransomware best practices, including backup, restore, and privileged access
Design configurations for secure backup and restore by using Azure Backup for hybrid and multicloud environments
Design solutions for security updates
Design solutions that align with the Microsoft Cybersecurity Reference Architectures (MCRA) and Microsoft cloud security benchmark (MCSB)
Design solutions that align with best practices for cybersecurity capabilities and controls
Design solutions that align with best practices for protecting against insider and external attacks
Design solutions that align with best practices for Zero Trust security, including the Zero Trust Rapid Modernization Plan
Design solutions that align with the Microsoft Cloud Adoption Framework for Azure and the Azure Well-Architected Framework
Design a new or evaluate an existing strategy for security and governance based on the CAF and the Well-Architected Framework
Recommend solutions for security and governance based on the the Microsoft Cloud Adoption Framework for Azure and the Well-Architected Framework
Design solutions for implementing and governing security by using an Azure landing zone
Design a DevSecOps process
Design security operations, identity, and compliance capabilities (3035%)
Design solutions for security operations
Develop security operations capabilities to support a hybrid or multicloud environment
Design a solution for centralized logging and auditing
Design a solution for security information and event management (SIEM), including Microsoft Sentinel
Design a solution for detection and response that includes extended detection and response (XDR)
Design a solution for security orchestration automated response (SOAR), including Microsoft Sentinel and Microsoft Defender
Design and evaluate security workflows, including incident response, threat hunting, incident management, and threat intelligence
Design and evaluate threat detection coverage by using MITRE ATT&CK
Design solutions for identity and access management
Design a solution for access to software as a service (SaaS), platform as a service (PaaS), infrastructure as a service (IaaS), hybrid/on-premises, and multicloud resources, including identity, networking, and application controls
Design a solution for Microsoft Azure Active Directory (Azure AD), part of Microsoft Entra, including hybrid and multicloud environments
Design a solution for external identities, including B2B, B2C, and decentralized identities
Design a modern authentication and authorization strategy, including Conditional Access, continuous access evaluation, threat intelligence integration, and risk scoring
Validate the alignment of Conditional Access policies with a Zero Trust strategy
Specify requirements to secure Active Directory Domain Services (AD DS)
Design a solution to manage secrets, keys, and certificates
Design solutions for securing privileged access
Design a solution for assigning and delegating privileged roles by using the enterprise access model
Design an identity governance solution, including Privileged Identity Management (PIM), Privileged Access Management (PAM), privileged entitlement management, and access reviews
Design a solution for securing the administration of cloud tenants, including SaaS and multicloud infrastructure and platforms
Design a solution for cloud infrastructure entitlement management that includes Microsoft Entra Permissions Management
Design a solution for Privileged Access Workstation (PAW) and bastion services
Design solutions for regulatory compliance
Translate compliance requirements into a security solution
Design a solution to address compliance requirements by using Microsoft Purview risk and compliance solutions
Design a solution to address privacy requirements, including Microsoft Priva
Design Azure Policy solutions to address security and compliance requirements
Evaluate infrastructure compliance by using Microsoft Defender for Cloud
Design security solutions for infrastructure (2025%)
Design solutions for security posture management in hybrid and multicloud environments
Evaluate security posture by using MCSB
Evaluate security posture by using Defender for Cloud
Evaluate security posture by using Microsoft Secure Score
Design integrated security posture management and workload protection solutions in hybrid and multicloud environments, including Defender for Cloud
Design cloud workload protection solutions that use Defender for Cloud, such as Microsoft Defender for Servers, Microsoft Defender for App Service, and Microsoft Defender for SQL
Design a solution for integrating hybrid and multicloud environments by using Azure Arc
Design a solution for Microsoft Defender External Attack Surface Management (Defender EASM)
Design solutions for securing server and client endpoints
Specify security requirements for servers, including multiple platforms and operating systems
Specify security requirements for mobile devices and clients, including endpoint protection, hardening, and configuration
Specify security requirements for IoT devices and embedded systems
Design a solution for securing operational technology (OT) and industrial control systems (ICS) by using Microsoft Defender for IoT
Specify security baselines for server and client endpoints
Design a solution for secure remote access
Specify requirements for securing SaaS, PaaS, and IaaS services
Specify security baselines for SaaS, PaaS, and IaaS services
Specify security requirements for IoT workloads
Specify security requirements for web workloads, including Azure App Service
Specify security requirements for containers
Specify security requirements for container orchestration
Design security solutions for applications and data (2025%)
Design solutions for securing Microsoft 365
Evaluate security posture for productivity and collaboration workloads by using metrics, including Secure Score and Defender for Cloud secure score
Design a Microsoft 365 Defender solution
Design secure configurations and operational practices for Microsoft 365 workloads and data
Design solutions for securing applications
Evaluate the security posture of existing application portfolios
Evaluate threats to business-critical applications by using threat modeling
Design and implement a full lifecycle strategy for application security
Design and implement standards and practices for securing the application development process
Map technologies to application security requirements
Design a solution for workload identity to authenticate and access Azure cloud resources
Design a solution for API management and security
Design a solution for secure access to applications, including Azure Web Application Firewall (WAF) and Azure Front Door
Design solutions for securing an organization's data
Design a solution for data discovery and classification by using Microsoft Purview data governance solutions
Specify priorities for mitigating threats to data
Design a solution for protection of data at rest, data in motion, and data in use
Design a security solution for data in Azure workloads, including Azure SQL, Azure Synapse Analytics, and Azure Cosmos DB
Design a security solution for data in Azure Storage
Design a security solution that includes Microsoft Defender for Storage and Defender for SQL
- Certificate in Principles of Cyber Security Academy for Health & FitnessUSD 13Duration: Upto 4 Hours
- Security Management, Criminal Intelligence, & GDPR NextGen LearningUSD 54Duration: Upto 20 Hours