Firerband Logo

Microsoft Certified: Security Operations Analyst Associate (SC-200)

Learn to investigate and respond to threats to your business using Microsoft Azure Sentinel, Azure Defender, Microsoft 365 Defender, and third-party security products.

What's Included

On this immersive course, you’ll build knowledge of collaborating with stakeholders to secure information technology systems for your organisation.


Through Firebrand’s Lecture | Lab | Review method, you’ll access official courseware, learn from certified instructors, and train in a distraction-free environment.


You’ll also learn to:

  • Reduce business risk by rapidly remediating active attacks in the environment

  • Advising on improvements to threat protection practices

  • Refer violations of business policies to appropriate stakeholders

Curriculum

You'll become an expert across the following modules:

Module 1: Introduction to Microsoft Defender XDR threat protection

Module 2: Mitigate incidents using Microsoft Defender XDR

Module 3: Protect your identities with Entra ID Protection

Module 4: Remediate risks with Microsoft Defender for Office 365

Module 5: Safeguard your environment with Microsoft Defender for Identity

Prerequisites

Before taking this course, you should have a basic understanding of the following topics:

● Microsoft 365

● Microsoft security, compliance, and identity products

● Azure services, specifically Azure SQL Database and Azure Storage

● Azure virtual machines and virtual networking

● Scripting concepts

And an intermediate understanding of Windows 10.

Exam info

As part of this course, you'll sit for the following exam at the Firebrand Training Centre, covered by our Certification Guarantee:

Microsoft Security Operations Analyst (SC-200) exam:



● Manage a security operations environment (20-25%)

● Configure protections and detections (15-20%)

● Manage incident response (35-40%)

● Perform threat hunting (15-20%)

No items to show.

Upcoming Courses

Filter courses by learning type:

Sorry, there are currently no dates available for this course. Please submit an enquiry and one of our team will contact you about potential future dates or alternative options.

FAQs

Yes, we do provide courses suitable for beginners. However, Firebrand's courses aren't easy and it's essential that you are interested and actively pursuing a career in IT.

Traditional training providers usually run their courses from 9am to 5pm. At Firebrand Training we maximise the number of learning hours to minimise the number of training days, so you’ll be back to your job as quickly as possible. You don’t waste time travelling to several courses and finding an exam centre after that.

We are official partners with leading vendors and therefore, we're provided with certification changes and updates, which we can then implement in our course delivery at a very early stage. This feedback is then analysed in view of changes or discrepancies. We will then address the topics mentioned and have a panel of subject matter experts provide us with valuable suggestions for improvement and solutions.

Our award-winning Lecture | Lab | Review method focuses on what matters:

Industry professionals delivering your lectures

Labs that bring the real world into the classroom, immersing you in every practical detail.

Reviews to test – and stretch – your knowledge

Exams that come at the perfect moment – when the material is still fresh in your mind.

Our focused approach delivers results!

Can't find the answer you're looking for?

Our expert learning advisors are ready to help. Whether you need course recommendations, have technical queries, or want to discuss your learning goals, we're just a message away.

Train your team

Since 2001 we’ve trained 134,561 employees from thousands of large and small organisations, saving them more than one million hours in training time.