Only 6 days
Classroom / Online Live
03/02/2025 (Monday)
Overview
On this accelerated 6 Day Microsoft Cybersecurity Architect Expert course, you’ll learn to design solutions that align with security best practices and priorities, design security operations, identity and compliance capabilities, design security solutions for infrastructure and design security solutions for applications and data.
You’ll also learn to support your business by designing security for infrastructure and designing a strategy for data and applications.
As a Microsoft Gold Partner for Learning, and through Firebrand’s Lecture | Lab | Review methodology, you’ll get access to Microsoft Official Curriculum (MOCs) and learn from Microsoft Certified Trainers (MCTs) in a distraction-free environment.
In order to achieve the Microsoft Certified: Cybersecurity Architect Expert certification, you need to pass Exam SC-100 as well as one of the following:
• Microsoft Certified: Security Operations Analyst Associate (Exam SC-200)
• Microsoft Certified: Identity and Access Administrator Associate (Exam SC-300)
• Microsoft Certified Azure Security Engineer Associate (Exam AZ-500)
Both exam SC-100 and exam SC-200, SC-300, or AZ-500 are prerequisites to become a Microsoft Certified: Cybersecurity Architect Expert.
As part of this course, you will sit SC-200: Microsoft Certified: Security Operations Analyst Associate. At the end of this course, you will sit SC-100: Microsoft Certified: Cybersecurity Architect Expert.
After you pass both exams, you'll automatically receive the Microsoft Certified: Cybersecurity Architect Expert certification.
Curriculum
SC-200: Microsoft Certified: Security Operations Analyst Associate:
• Module 1: Introduction to Microsoft Defender XDR threat protection
• Module 2: Mitigate incidents using Microsoft Defender XDR
• Module 3: Protect your identities with Entra ID Protection
• Module 4: Remediate risks with Microsoft Defender for Office 365
• Module 5: Safeguard your environment with Microsoft Defender for Identity
• Module 6: Secure your cloud apps and services with Microsoft Defender for Cloud Apps
• Module 7: Fundamentals of Generative AI
• Module 8: Describe Microsoft Copilot for Security
• Module 9: Describe the core features of Microsoft Copilot for Security
• Module 10: Describe the embedded experiences of Microsoft Copilot for Security
• Module 11: Respond to data loss prevention alerts using Microsoft 365
• Module 12: Manage insider risk in Microsoft Purview
• Module 13: Search and investigate with Microsoft Purview Audit
• Module 14: Investigate threats with Content search in Microsoft Purview
• Module 15: Protect against threats with Microsoft Defender for Endpoint
• Module 16: Deploy the Microsoft Defender for Endpoint environment
• Module 17: Implement Windows security enhancements with Microsoft Defender for Endpoint
• Module 18: Perform device investigations in Microsoft Defender for Endpoint
• Module 19: Perform actions on a device using Microsoft Defender for Endpoint
• Module 20: Perform evidence and entities investigations using Microsoft Defender for Endpoint
• Module 21: Configure and manage automation using Microsoft Defender for Endpoint
• Module 22: Configure for alerts and detections in Microsoft Defender for Endpoint
• Module 23: Utilize Vulnerability Management in Microsoft Defender for Endpoint
• Module 24: Plan for cloud workload protections using Microsoft Defender for Cloud
• Module 25: Connect Azure assets to Microsoft Defender for Cloud
• Module 26: Connect non-Azure resources to Microsoft Defender for Cloud
• Module 27: Manage your cloud security posture management
• Module 28: Explain cloud workload protections in Microsoft Defender for Cloud
• Module 29: Remediate security alerts using Microsoft Defender for Cloud
SC-100: Microsoft Certified: Cybersecurity Architect Expert:
• Module 1: Introduction to Zero Trust and best practice frameworks
• Module 2: Design solutions that align with the Cloud Adoption Framework (CAF) and Well-Architected Framework (WAF)
• Module 3: Design solutions that align with the Microsoft Cybersecurity Reference Architecture (MCRA) and Microsoft cloud security benchmark (MCSB)
• Module 4: Design a resiliency strategy for ransomware and other attacks based on Microsoft Security Best Practices
• Module 5: Case study: Design solutions that align with security best practices and priorities
• Module 6: Design solutions for regulatory compliance
• Module 7: Design solutions for identity and access management
• Module 8: Design solutions for securing privileged access
• Module 9: Design solutions for security operations
• Module 10: Case study: Design security operations, identity and compliance capabilities
• Module 11: Design solutions for securing Microsoft 365
• Module 12: Design solutions for securing applications
• Module 13: Design solutions for securing an organization's data
• Module 14: Case study: Design security solutions for applications and data
• Module 15: Specify requirements for securing SaaS, PaaS, and IaaS services
• Module 16: Design solutions for security posture management in hybrid and multicloud environments
• Module 17: Design solutions for securing server and client endpoints
• Module 18: Design solutions for network security
• Module 19: Case study: Design security solutions for infrastructure
Exam Track
As part of your accelerated course, you'll sit the following exams at the Firebrand Training centre, covered by your Certification Guarantee:
Exam SC-200: Microsoft Security Operations Analyst
- Exam code: SC-200
- Language: English
- Domains:
- Manage a security operations environment (20–25%)
- Configure protections and detections (15–20%)
- Manage incident response (35–40%)
- Perform threat hunting (15–20%)
Exam SC-100: Microsoft Cybersecurity Architect
- Exam code: SC-100
- Language: English
- Domains:
- Design solutions that align with security best practices and priorities (20–25%)
- Design security operations, identity, and compliance capabilities (25–30%)
- Design security solutions for infrastructure (25–30%)
- Design security solutions for applications and data (20–25%)
Prerequisites
Before attending this course, you must have earned one of the following Associate level certifications:
- Microsoft Certified: Identity and Access Administrator Associate
- Microsoft Certified: Security Operations Analyst Associate
- Microsoft Certified Azure Security Engineer Associate
Unsure whether you meet the prerequisites? Don’t worry. Your training consultant will discuss your background with you to understand if this course is right for you.
What's Included
Your accelerated course includes:
- Accommodation *
- Meals, unlimited snacks, beverages, tea and coffee *
- On-site exams **
- Exam vouchers **
- Practice tests **
- Certification Guarantee ***
- Courseware
- Up-to 12 hours of instructor-led training each day
- 24-hour lab access
- Digital courseware **
* For residential training only. Accommodation is included from the night before the course starts. This doesn't apply for online courses.
** Some exceptions apply. Please refer to the Exam Track or speak with our experts.
*** Pass first time or train again free as many times as it takes, unlimited for 1 year. Just pay for accommodation, exams, and incidental costs.
Benefits
Seven reasons why you should sit your course with Firebrand Training
- Two options of training. Choose between residential classroom-based, or online courses
- You'll be certified fast. With us, you’ll be trained in record time
- Our course is all-inclusive. A one-off fee covers all course materials, exams**, accommodation* and meals*. No hidden extras.
- Pass the first time or train again for free. This is our guarantee. We’re confident you’ll pass your course the first time. But if not, come back within a year and only pay for accommodation, exams and incidental costs
- You’ll learn more. A day with a traditional training provider generally runs from 9 am – 5 pm, with a nice long break for lunch. With Firebrand Training you’ll get at least 12 hours/day of quality learning time, with your instructor
- You’ll learn faster. Chances are, you’ll have a different learning style to those around you. We combine visual, auditory and tactile styles to deliver the material in a way that ensures you will learn faster and more easily
- You’ll be studying with the best. We’ve been named in the Training Industry’s “Top 20 IT Training Companies of the Year” every year since 2010. As well as winning many more awards, we’ve trained and certified over 135,000 professionals
*For residential training only. Doesn't apply for online courses
**Some exceptions apply. Please refer to the Exam Track or speak with our experts
Think you are ready for the course? Take a FREE practice test to assess your knowledge! Free Practice Test