MS-500 - Microsoft 365 Security Administration Certification Training

• How to explain and use conditional access?
• How to describe cyber attack threat vectors?
• How to explain and use sensitivity levels?
• How to plan and implement Azure AD Connect?
• How to plan, execute, and manage Azure Identity Protection?
• How to use Microsoft Secure Score to improve organizational security posture?
• How to implement information rights management?
• How to manage GDPR data subject requests?
• How to manage an eDiscovery investigation?
• How to administer user and group access in Microsoft 365?
• How to deploy and manage Cloud App Security?

• Microsoft 365 Enterprise administrators
• Business Stakeholders
• Other workload administrators associated with identity protection, threat protection, information protection, data governance, and security management

• Work experience with Office 365 and Windows 10 devices
• Basic understanding of computer networks, authorization and authentication.
• Conceptual understanding of Microsoft Azure
• Working knowledge of managing mobile networks

Module 1: User and Group Management

• The Zero Trust model
• Plan your identity and authentication solution
• Identity and Access Management concepts
• User accounts and roles
• Password Management

Module 2: Identity Synchronization and Protection

• Configure and manage synchronized identities
• Azure AD Identity Protection
• Plan directory synchronization

Module 3: Identity and Access Management

• Identity Governance
• Manage device access
• Application Management
• Role Based Access Control (RBAC)
• Privileged Identity Management
• Solutions for external access

Module 4: Security in Microsoft 365

• Microsoft security solutions
• Secure Score
• Threat vectors and data breaches
• Security strategy and principles

Module 5: Threat Protection

• Manage Safe Attachments
• Manage Safe Links
• Microsoft Defender for Identity
• Exchange Online Protection (EOP)
• Microsoft Defender for Office 365
• Microsoft Defender for Endpoint

Module 6: Threat Management

• Security dashboard
• Threat investigation and response
• Azure Sentinel
• Advanced Threat Analytics

Module 7: Microsoft Cloud Application Security

• Deploy Cloud Application Security
• Use cloud application security information

Module 8: Mobility

• Deploy mobile device services
• Mobile Device Management (MDM)
• Mobile Application Management (MAM)
• Enroll devices to Mobile Device Management

Module 9: Information Protection and Governance

• Sensitivity labels
• Archiving in Microsoft 365
• Information protection concepts
• Governance and Records Management
• Retention in Microsoft 365
• In-place records management in SharePoint
• Retention policies in the Microsoft 365 Compliance Center
• Archiving and retention in Exchange

Module 10: Rights Management and Encryption

• Office 365 Message Encryption
• Secure Multipurpose Internet Mail Extension (S-MIME)
• Information Rights Management (IRM)

Module 11: Data Loss Prevention

• Create a DLP policy
• Customize a DLP policy
• Create a DLP policy to protect documents
• Data loss prevention fundamentals
• Policy tips

Module 12: Compliance Management

• Compliance center

Module 13: Insider Risk Management

• Insider Risk
• Privileged Access
• Building ethical walls in Exchange Online
• Information barriers

Module 14: Discover and Respond

• Audit Log Investigations
• Advanced eDiscovery
• Content Search