Microsoft Security Operations Analyst Associate

Overview

On this accelerated Microsoft Certified: Security Operations Analyst Associate course, you’ll learn to investigate and respond to threats to your business using Microsoft Azure Sentinel, Azure Defender, Microsoft 365 Defender, and third-party security products.

In just 3 days, you’ll build knowledge on collaborating with stakeholders to secure information technology systems for your organisation. You’ll also learn how to:

Reduce business risk by rapidly remediating active attacks in the environment
Advising on improvements to threat protection practices
Refer violations of business policies to appropriate stakeholders

At the end of this course, you’ll sit exam Exam SC-200: Microsoft Security Operations Analyst and achieve your certification. As Firebrand are a Microsoft Gold Partner for Learning, you’ll get access to the official exam, Microsoft Official Curriculum (MOCs) and learn from Microsoft Certified Trainers (MCTs).

Through Firebrand’s Lecture | Lab | Review methodology, you’ll achieve your certification twice as fast as traditional training.

See prices now to find out how much you could save when you train at twice the speed.

See prices

Four reasons why you should sit your course with Firebrand Training

You'll be trained and certified faster. Learn more on this 3-day accelerated course. You'll get at least 12 hours a day of quality learning time in a distraction-free environment
Your course is all-inclusive. One simple price covers all course materials, exams, accommodation and meals – so you can focus on learning
Pass first time or train again for free. Your expert instructor will deliver our unique accelerated learning methods, allowing you to learn faster and be in the best possible position to pass first time. In the unlikely event that you don't, it's covered by your Certification Guarantee
Study with an award-winning training provider. We've won the Learning and Performance Institute's "Training Company of the Year" three times. Firebrand is your fastest way to learn, with 134.561 students saving more than one million hours since 2001

Benefits

Think you are ready for the course? Take a FREE practice test to assess your knowledge!

Free Practice Test

Curriculum

SC-200: Microsoft Security Operations Analyst

Module 1: Mitigate threats using Microsoft 365 Defender
Module 2: Mitigate threats using Microsoft Defender for Endpoint
Module 3: Mitigate threats using Microsoft Defender for Cloud
Module 4: Create queries for Microsoft Sentinel using Kusto Query Language (KQL)
Module 5: Configure your Microsoft Sentinel environment
Module 6: Connect logs to Microsoft Sentinel
Module 7: Create detections and perform investigations using Microsoft Sentinel
Module 8: Perform threat hunting in Microsoft Sentinel

Exam Track

As part of this accelerated course, you’ll sit for the following exam at the Firebrand Training centre, covered by your Certification Guarantee:

Exam SC-200: Microsoft Security Operations Analyst

Exam code: SC-200
Language: English
Domains:

Mitigate threats using Microsoft 365 Defender (25-30%)
Mitigate threats using Microsoft Defender for Cloud (20-25%)
Mitigate threats using Microsoft Sentinel (50-55%)

What's Included

Your accelerated course includes:

Accommodation *
Meals, unlimited snacks, beverages, tea and coffee *
On-site exams **
Exam vouchers **
Practice tests **
Certification Guarantee ***
Courseware
Up-to 12 hours of instructor-led training each day
24-hour lab access
Digital courseware **

* For residential training only. Accommodation is included from the night before the course starts. This doesn't apply for online courses.
** Some exceptions apply. Please refer to the Exam Track or speak with our experts
*** Pass first time or train again free as many times as it takes, unlimited for 1 year. Just pay for accommodation, exams, and incidental costs.

Prerequisites

Before taking this accelerated course, you should have a basic understanding of the following topics:

Microsoft 365
Microsoft security, compliance, and identity products
Azure services, specifically Azure SQL Database and Azure Storage
Azure virtual machines and virtual networking
Scripting concepts

And an intermediate understanding of the following:

Windows 10

Are you ready to get certified in record time?

We interview all applicants for the course on their technical background, degrees and certifications held, and general suitability. If you get through this screening process, it means you stand a great chance of passing.

Firebrand Training is an immersive training environment. You must be committed to the course. The above prerequisites are guidelines, but many students with less experience have other background or traits that have enabled their success in accelerated training through Firebrand Training.

If you have any doubts as to whether you meet the pre-requisites please call (0)8 52 50 01 66 and speak to one of our enrolment consultants, who can help you with a training plan.

Reviews

We've currently trained 134.561 students in 12 years. We asked them all to review our Accelerated Learning. Currently,
96,48% have said Firebrand exceeded their expectations:

"I really enjoyed this training. The instructor used many illustrations and examples to convey knowledge. I would certainly use Firebrand again and again. Thanks folks."
Anonymous, Reckitt. (24/4/2023 (Monday) to 29/4/2023 (Saturday))

"Training camp allows to focus and not being disturbed by daily routine"
SL, LnA. (24/4/2023 (Monday) to 29/4/2023 (Saturday))

"Great training at a well suited facility for long hours studying to get a qualification in a short period of time."
Anonymous. (27/4/2023 (Thursday) to 29/4/2023 (Saturday))

"It was my third training with Firebrand and each time I was very satisfied with the content, the process and the result."
Mathias Hemmerling. (24/4/2023 (Monday) to 29/4/2023 (Saturday))

"I enjoyed the broad overview of the subject matter I got here. Speaking with a experienced person of the field gives you great information. In the end I felt more knowledgeable and I''m looking forward to implementing the things in my daily work life."
Sander De Schrijver, Sollitics. (25/4/2023 (Tuesday) to 28/4/2023 (Friday))

Course Dates

Microsoft - Certified: Security Operations Analyst Associate
Start	Finish	Status	Book now
24/4/2023 (Monday)	26/4/2023 (Wednesday)	Finished - Leave feedback
19/6/2023 (Monday)	21/6/2023 (Wednesday)	Limited availability	Book now
18/9/2023 (Monday)	20/9/2023 (Wednesday)	Open	Book now
13/11/2023 (Monday)	15/11/2023 (Wednesday)	Open	Book now
4/12/2023 (Monday)	6/12/2023 (Wednesday)	Open	Book now

Microsoft - Security Operations Analyst Associate | Exam SC-200 certification