We may earn an affiliate commission when you visit our partners.
Course image
John Christopher

Have access to the following:

  • Training from an instructor of over 20 years who has trained thousands of people and also a Microsoft Certified Trainer

  • Lecture that explains the concepts in an easy to learn method for someone that is just starting out with this material

  • Instructor led hands on and simulations to practice that can be followed even if you have little to no experience

Enroll now

What's inside

Learning objectives

  • Learn the concepts and perform hands on activities needed to pass the sc-900 exam
  • Gain a tremendous amount of knowledge involving securing microsoft 365 / azure services
  • Get loads of hands on experience with securing microsoft 365 / azure services
  • Utilize hands on simulations that can be access anytime, anywhere!

Syllabus

Introduction
Welcome to the course!
Understanding the Microsoft 365 and Azure Environment
Having a Solid Foundation of Active Directory Domains
Read more

Save this course

Create your own learning path. Save this course to your list so you can find it easily later.
Save

Career center

Learners who complete SC-900: Microsoft Security, Compliance, & Identity with SIMS will develop knowledge and skills that may be useful to these careers:
Cloud Security Analyst
A Cloud Security Analyst plays a crucial role in safeguarding an organization's cloud infrastructure and data, often specializing in platforms like Microsoft Azure and Microsoft 365. This involves monitoring security threats, responding to incidents, and implementing security controls. Learners in this course gain significant knowledge in securing Microsoft 365 and Azure Services, which directly prepares them for this role. The course covers essential concepts such as Azure DDoS Protection, Azure Firewall, Network Security Groups, and utilizing Microsoft Defender for Cloud. It also provides hands-on experience with Microsoft Sentinel for threat detection and mitigation, alongside Microsoft 365 Defender services like Defender for Endpoint and Defender for Cloud Apps. These practical skills, reinforced by simulations, are vital for a Cloud Security Analyst to design, implement, and maintain robust cloud security postures. This course helps build a foundation in understanding the shared responsibility model and implementing Zero-Trust principles fundamental to cloud security.
Identity and Access Management Specialist
An Identity and Access Management Specialist is responsible for managing and securing digital identities and controlling access to resources within an organization. This critical role ensures that only authorized users can access specific systems and data. This course is exceptionally relevant, as it provides a deep dive into defining identity concepts and functions of Microsoft Entra ID, including creating user identities, managing hybrid identity, and implementing authentication methods like multi-factor authentication. Learners also gain practical experience with access management capabilities such as creating conditional access policies and implementing Microsoft Entra roles with role-based access control. The course further covers advanced identity protection and governance capabilities like access reviews and Privileged Identity Management, directly equipping future Identity and Access Management Specialists with the skills to secure identity as the primary security perimeter.
Security Operations Center Analyst
A Security Operations Center Analyst, or SOC Analyst, is at the forefront of cybersecurity defense, continuously monitoring for security incidents, analyzing threats, and responding to alerts to protect an organization's assets. This course directly contributes to developing the foundational competencies required for a Security Operations Center Analyst. It educates learners on defining the concepts of security information and event management and security orchestration, automation, and response through the lens of Microsoft Sentinel. The curriculum provides specific instruction on describing threat detection and mitigation capabilities in Microsoft Sentinel and outlines various Microsoft 365 Defender services such as Defender for Office 365 and Defender for Endpoint. With instructor-led hands-on and simulations, learners practice identifying and responding to threats using tools crucial for daily operation in a SOC environment.
Azure Security Engineer
An Azure Security Engineer is tasked with implementing, managing, and monitoring security controls, privacy, and compliance within the Microsoft Azure environment. This involves designing secure Azure solutions and ensuring that cloud resources are protected against evolving threats. This course is tailor-made for aspiring Azure Security Engineers, offering extensive knowledge and practical experience with core infrastructure security services in Azure. It details Azure distributed denial-of-service Protection, Azure Firewall, Web Application Firewall, network segmentation with virtual networks, and Azure Network Security Groups. Furthermore, the course describes security management capabilities of Azure, including Microsoft Defender for Cloud and security baselines for Azure. The hands-on simulations allow learners to create an Azure Firewall and configure Network Security Groups, providing the tangible experience essential for configuring and maintaining security in Azure.
Microsoft 365 Security Administrator
A Microsoft 365 Security Administrator manages and maintains the security posture of an organization's Microsoft 365 environment, implementing policies, monitoring security services, and responding to incidents specifically within this ecosystem. This course provides comprehensive knowledge directly applicable to the responsibilities of a Microsoft 365 Security Administrator. It covers describing Microsoft 365 Defender services, including Defender for Office 365, Defender for Endpoint, Defender for Cloud Apps, and Defender for Identity, along with using the Microsoft 365 Defender portal. Learners gain practical skills in implementing Microsoft Entra roles using Microsoft 365 and leveraging multi-factor authentication. The course also discusses compliance capabilities through the Microsoft Purview compliance portal, which is integral to securing data within Microsoft 365. This deep dive into Microsoft-specific security tools and practices is invaluable for securing the modern workplace.
Governance Risk and Compliance Administrator
A Governance Risk and Compliance Administrator ensures an organization adheres to legal, regulatory, and internal policy requirements while managing potential risks and maintaining a strong security posture. This course offers comprehensive insights into the compliance aspects of Microsoft's ecosystem, making it highly beneficial for a Governance Risk and Compliance Administrator. It delves into describing compliance concepts, the Microsoft Purview compliance portal, and Compliance Manager, including the use and benefits of compliance score. Learners also explore information protection and data lifecycle management, focusing on data classification, sensitivity labels, Data Loss Prevention, Records Management, and Retention Policies. The course's practical simulations, like creating a static deletion retention policy, provide tangible experience vital for implementing and maintaining compliance frameworks.
Data Loss Prevention Specialist
A Data Loss Prevention Specialist focuses on preventing sensitive data from leaving an organization's control, whether accidentally or maliciously. This role involves configuring and managing Data Loss Prevention solutions, classifying data, and implementing policies to protect information. This course is particularly relevant for a Data Loss Prevention Specialist, as it provides detailed instruction on information protection and data lifecycle management within Microsoft Purview. Learners are taught to describe data classification capabilities, sensitivity labels, and the core concepts and benefits of Data Loss Prevention. The course includes hands-on basics of using sensitivity labels and Data Loss Prevention, along with understanding Retention Policies and Records Management. The practical exposure to Purview's capabilities is crucial for anyone intending to specialize in safeguarding sensitive organizational data and ensuring its appropriate handling.
Information Security Analyst
An Information Security Analyst is a broad role focused on protecting an organization's information systems and data from cyber threats. This involves identifying vulnerabilities, implementing security measures, and responding to security incidents. This course helps build a foundation for an Information Security Analyst by covering fundamental security concepts like the shared responsibility model, defense in depth, and the Zero-Trust model. It also introduces various security technologies such as encryption and hashing. The curriculum provides extensive knowledge in securing Microsoft 365 and Azure Services, including hands-on experience with Microsoft Defender for Cloud and Microsoft Sentinel. Understanding identity concepts, multi-factor authentication, and role-based access control from the course are all critical elements an Information Security Analyst applies daily to maintain robust security.
Security Administrator
A Security Administrator implements and manages security systems, policies, and procedures to protect an organization's information technology assets and data. This role is broad, encompassing various aspects of cybersecurity operations, from identity management to infrastructure protection. This course provides comprehensive knowledge and hands-on skills highly relevant for a Security Administrator. It covers defining authentication and authorization, implementing multi-factor authentication, and managing password protection. Learners gain experience with Microsoft Entra roles, role-based access control, and Privileged Identity Management. Furthermore, the course details core infrastructure security services like Azure Firewall and Network Security Groups, alongside security management capabilities using Microsoft Defender for Cloud. The practical experience with these Microsoft security tools makes this course particularly appealing to those seeking to manage security within a Microsoft-centric environment.
Privacy Compliance Specialist
A Privacy Compliance Specialist ensures an organization's practices align with privacy laws and regulations, managing data privacy risks and upholding ethical data handling. This role often involves developing policies and advising on data protection strategies. This course provides an excellent foundation for a Privacy Compliance Specialist, as it covers Microsoft’s Service Trust Portal and privacy principles in detail. Learners explore the offerings of the Service Trust portal and gain insight into Microsoft’s privacy principles, which are crucial for understanding a major cloud provider's commitment to data privacy. Furthermore, the course delves into the Microsoft Purview compliance portal, describing compliance manager, data classification capabilities, and the use of sensitivity labels and Data Loss Prevention, all of which are directly applicable to maintaining and demonstrating privacy compliance within modern cloud environments.
Network Security Administrator
A Network Security Administrator is responsible for securing an organization's network infrastructure, implementing firewall rules, managing network access, and protecting against network-based attacks. This course provides valuable knowledge that may be helpful for a Network Security Administrator, particularly concerning cloud network security within Azure. It describes core infrastructure security services in Azure, including Azure distributed denial-of-service Protection, Azure Firewall, Web Application Firewall, and network segmentation with Azure virtual networks. Learners also gain practical experience with Azure Network Security Groups, with simulations to create an Network Security Group and add inbound rules. Understanding these concepts and gaining hands-on practice in securing cloud networks is relevant for a Network Security Administrator adapting to hybrid or cloud-native network environments.
Security Consultant
A Security Consultant advises organizations on cybersecurity strategies, risk assessment, and the implementation of security solutions. This role often involves analyzing existing security postures, recommending improvements, and guiding clients through complex security challenges. This course may be useful for an aspiring Security Consultant by equipping them with foundational knowledge in Microsoft Security, Compliance, and Identity. It provides a comprehensive understanding of concepts like the shared responsibility model, defense in depth, and Zero-Trust, which are crucial for strategic consulting. Learners will gain insight into various Microsoft security services, including Microsoft Entra ID for identity management, Azure security services like Firewalls, and compliance capabilities through Microsoft Purview. This breadth of knowledge, focused on a leading cloud provider, allows a Security Consultant to speak confidently and accurately about modern security architectures and compliance requirements.
Cloud Platform Engineer
A Cloud Platform Engineer designs, builds, and maintains the underlying infrastructure and services that support applications in cloud environments, like Microsoft Azure. While their primary focus is on platform reliability and scalability, securing these platforms is an integral part of their responsibilities. This course may be helpful for a Cloud Platform Engineer by providing essential knowledge in securing Microsoft 365 and Azure Services. It covers critical areas such as understanding the Microsoft 365 and Azure Environment, having a solid foundation of Active Directory Domains, and describing core infrastructure security services in Azure, including Firewalls, Network Security Groups, and Azure Key Vault. The hands-on activities, such as creating a virtual machine in Azure and configuring security components, are directly relevant for building secure cloud platforms from the ground up, ensuring security is integrated throughout the development lifecycle. This course helps integrate security best practices into their infrastructure design.
IT Systems Administrator
An IT Systems Administrator manages and maintains an organization's computer systems and servers, ensuring they run efficiently, securely, and reliably. This broad role often involves managing user accounts, network resources, and system security. This course may be helpful for an IT Systems Administrator by providing a solid foundation in managing identity and security within Microsoft environments. It covers essential topics such as understanding the Microsoft 365 and Azure Environment, having a solid foundation of Active Directory Domains, and describing functions and identity types of Microsoft Entra ID. Managing user identities, implementing multi-factor authentication, and understanding role-based access control are core skills directly addressed. Furthermore, the course provides insight into security concepts like defense in depth and using tools such as Microsoft Defender for Cloud, which are increasingly relevant for administrators overseeing hybrid or cloud-based systems.
Technical Support Engineer
A Technical Support Engineer provides assistance to users encountering technical issues with hardware, software, or network systems. This role is often a first point of contact for troubleshooting and resolving problems, requiring a solid understanding of the underlying technologies. This course may be useful for a Technical Support Engineer, particularly those supporting Microsoft products and cloud services. It provides fundamental knowledge of the Microsoft 365 and Azure Environment, Active Directory Domains, and Microsoft Entra ID. Key areas like defining authentication, multi-factor authentication, and access management capabilities of Microsoft Entra ID are crucial for troubleshooting user login and access issues. Understanding basic security concepts, such as password protection and the shared responsibility model, may also help in diagnosing and resolving common user-related security concerns within a Microsoft ecosystem.

Reading list

We've selected 50 books that we think will supplement your learning. Use these to develop background knowledge, enrich your coursework, and gain a deeper understanding of the topics covered in SC-900: Microsoft Security, Compliance, & Identity with SIMS.
This core book for anyone focusing on the administrative aspects of Microsoft Entra ID, aligning directly with the SC-300 certification exam objectives. It dives deep into implementing and managing identities, authentication, authorization, and identity governance. It must-read for those pursuing an Identity and Access Administrator role and serves as a key reference tool.
Given the prevalence of Microsoft 365 in enterprises, this book is highly relevant for implementing DLP within this ecosystem. It guides administrators in configuring security and compliance features, including DLP policies, within Microsoft 365 environments.
Given the strong link between DLP and data privacy regulations like GDPR, this book must-read for understanding the regulatory landscape. It clarifies core concepts and provides practical guidance for compliance professionals, which directly impacts DLP policy and implementation.
The second edition of 'Zero Trust Networks' offers updated content, scenarios, and real-world examples, making it highly relevant for understanding this contemporary IAM model. It provides a detailed explanation of the paradigm shift towards assuming breach.
Provides a detailed explanation of OAuth 2.0 and OpenID Connect, two critical protocols in modern IAM for authentication and authorization. It delves into the 'whys' as well as the 'hows', offering a professional understanding of these standards. The final release was published recently, ensuring up-to-date information.
Another excellent resource for preparing for the SC-300 certification, this guide focuses on implementing IAM solutions with Azure AD (Entra ID) and building an identity governance strategy. It complements the Exam Ref by potentially offering different perspectives or practice materials.
Provides a deep dive into the technical aspects of cloud security. It covers topics such as cloud security architectures, security controls, and threat detection and response.
A more in-depth exploration than 'Network Security Essentials,' this book delves into the theory and practice of cryptography and network security. It covers a wide range of topics, from encryption algorithms to network security applications. comprehensive resource often used as a textbook for undergraduate and graduate-level courses.
The second edition of this book is expected to provide updated information on modern identity management protocols and their application development. It's a valuable resource for developers and architects working with OAuth 2.0, OpenID Connect, and SAML 2.0.
Provides a comprehensive overview of cloud security, covering everything from basic concepts to advanced topics such as threat detection and incident response. It is an excellent resource for anyone who wants to learn more about cloud security.
This study guide provides focused content, practice questions, and labs specifically for the SC-300 exam. It is highly practical and helps solidify understanding through hands-on exercises. It's a valuable tool for exam preparation and gaining practical configuration experience with Microsoft Entra ID.
Practical guide to building and operating a network security monitoring (NSM) capability. It covers data collection, detection techniques, and analysis. It's an essential resource for security analysts and anyone responsible for monitoring network traffic for malicious activity.
Covers identity and access management within the context of Microsoft 365 security and compliance. It is highly relevant for M365 administrators and security professionals, detailing how Entra ID features like Conditional Access and hybrid identity are used in a Microsoft 365 environment. It provides a broader perspective on identity's role in enterprise security.
Emphasizes a risk-based approach to data protection, which critical component of effective DLP. It helps in identifying and prioritizing data loss risks and implementing controls based on the level of risk.
Offers a practical introduction to penetration testing and ethical hacking. It guides readers through the process of identifying and exploiting vulnerabilities in networks and systems. It hands-on guide suitable for those interested in offensive security and understanding how attackers operate.
Offers a comprehensive guide to Data Loss Prevention (DLP), covering a wide range of topics and providing a self-assessment tool. It's a valuable resource for understanding the various facets of DLP and identifying areas for improvement within an organization's DLP program.
Focused on developers, this book explains how to use Azure AD (now Entra ID) to secure applications. It covers modern authentication techniques and practical implementation with code examples. It is crucial for developers building applications that integrate with Microsoft identity and provides deep insight into the developer aspects of Entra ID.
Based on real bug bounty reports, this book offers practical insights into finding vulnerabilities in web applications. It's a valuable resource for aspiring bug bounty hunters and those interested in learning about common web security flaws through real-world examples.
Offers a collection of practical recipes for implementing common Azure security tasks.
Provides guidance on conducting security assessments and penetration tests on Azure resources.
This guide provides an extensive overview of information security and privacy laws in the United States, including recent developments like the California Consumer Privacy Act. Understanding these legal requirements is crucial for implementing compliant DLP solutions.
Provides a practical guide to conducting cybersecurity risk assessments. It covers various risk assessment methodologies and techniques, and it is suitable for professionals responsible for identifying and managing cybersecurity risks.
Focusing on the threats and vulnerabilities related to identity, this book is highly relevant for understanding the importance of an effective IAM solution. It provides insights into how identities are attacked and how to build defenses.
Provides a comprehensive overview of cybersecurity compliance. It covers legal and regulatory requirements, best practices, and risk management strategies for various industries and organizations. This book is written by an expert in the field of cybersecurity.
Provides a foundational understanding of security, compliance, and identity concepts within Microsoft 365 and Azure, with a significant focus on Microsoft Entra ID. It is ideal for those new to the topic or preparing for the SC-900 certification. It serves as excellent prerequisite reading for more advanced Entra ID subjects.
Focusing on EU data protection law, including GDPR, this book provides practical guidance for compliance. Given the global reach of many data protection regulations, this book is relevant for organizations operating within or interacting with the EU.
Focuses on incorporating threat intelligence into incident response, which is highly relevant to DLP in identifying and mitigating data exfiltration attempts. It helps in building a more proactive and informed DLP strategy.
Covers the Microsoft 365 Defender suite, which includes Microsoft Defender for Identity. It is essential for understanding how Entra ID signals are used for threat detection and identity protection. It provides insight into the advanced security features that build upon the Entra ID foundation.
Offers a comprehensive overview of cloud security fundamentals, making it a good starting point for beginners.
Focuses on the security features and capabilities of Microsoft Azure, including access control, encryption, and monitoring.
Provides a comprehensive guide to cybersecurity compliance and risk management for managers. It covers legal and regulatory requirements, best practices, and risk management strategies for various industries and organizations.
Focuses on the security and privacy challenges faced by enterprises that are adopting cloud computing. It provides practical guidance on how to protect data, applications, and infrastructure in the cloud.
Provides a comprehensive overview of cloud security risks and best practices. It is an excellent resource for anyone who wants to learn more about how to protect data and applications in the cloud.
Provides a comprehensive overview of Microsoft Azure Security Center. It covers topics such as Azure Security Center architecture, security monitoring, and threat detection and response.
Provides a comprehensive overview of cloud security compliance. It covers topics such as cloud security standards, cloud security regulations, and cloud security audits.
Provides a hands-on approach to cloud security. It covers topics such as cloud security assessment, cloud security testing, and cloud security incident response.
Provides a practical introduction to modern encryption, focusing on the algorithms and techniques used in real-world applications. It strikes a balance between theoretical concepts and practical implementation, making it suitable for students and practitioners interested in the cryptographic foundations of network security.
Effective DLP relies heavily on a strong data governance framework. provides a comprehensive guide to designing and implementing a data governance program, which is essential for understanding where sensitive data resides and how it should be handled.
Provides a detailed examination of data privacy law, which is intricately linked with Data Loss Prevention. Understanding the legal requirements for data protection is fundamental to designing and implementing compliant DLP solutions.
Provides an introductory look at the interconnected areas of data security, governance, and privacy. It helps in understanding how these concepts work together to protect data and can serve as a starting point before exploring each area in more detail.
While covering broader Azure administration, this book dedicates significant content to managing Azure identities and governance using Microsoft Entra ID. It valuable resource for aspiring Azure administrators and provides practical knowledge relevant to the AZ-104 certification. It helps solidify understanding of how Entra ID fits into the overall Azure environment.
Is essential for understanding hybrid identity scenarios involving on-premises Active Directory and Microsoft Entra ID. It provides a deep dive into Active Directory concepts and how they integrate with cloud identities. It is crucial for organizations managing hybrid environments and serves as a valuable reference for AD administrators transitioning to the cloud.
Provides a solid foundation on cloud security principles and best practices, complementing the SC-900 topics.
Provides a historical perspective on IAM and emphasizes its importance. It covers designing, deploying, and managing identity architectures, offering a comprehensive view of the digital identity lifecycle.
Microsoft Intune is deeply integrated with Microsoft Entra ID for device identities, compliance, and conditional access. is highly relevant for understanding how Entra ID is leveraged in modern endpoint management and security. It provides practical scenarios involving Entra ID for device-based access control.
This reference focuses specifically on Azure AD B2C (Business to Consumer), which is now part of Microsoft Entra External ID. It is valuable for those needing to understand and implement identity solutions for external users in customer-facing applications. It provides a concise overview of B2C features and configurations.

Share

Help others find this course page by sharing it with your friends and followers:

Similar courses

Here are nine courses similar to SC-900: Microsoft Security, Compliance, & Identity with SIMS.
CompTIA Cloud CV0-003: Unit 3
Most relevant
Getting Started with Microsoft Entra
Most relevant
Cloud Computing Security - Master's
Most relevant
Microsoft Security Solutions Capabilities
Most relevant
Azure: Identity and Access Management
Most relevant
Configuring IAM Permissions with gCloud - Azure
Most relevant
Microsoft 365 Security Admin Course with practice SIMs
Most relevant
Secure your Cloud Data
Most relevant
Practice Exams | Microsoft Azure Fundamentals AZ-900
Most relevant

Udemy Buyer Protection & Guarantee

Verified partner policies & purchase protections

Global Marketplace Leader
Free Trial & Audit

Free Lecture Previews

Free preview video lectures available for all courses; optional 7-day free trial on Personal Plan subscriptions (cancel before trial ends to avoid conversion).

Return & Refund Policy

30-Day Money-Back Guarantee

30-day money-back guarantee on all eligible individual course purchases (provided course content has not been substantially consumed or downloaded). Subscription fees are non-refundable once billed.

Buyer Protections

Verified Academic & Industry Partner

Lifetime access to purchased individual courses and future updates, verifiable certificate of completion, and direct student Q&A forums.

Key Purchase Protections
30-day 100% money-back guarantee on course purchases
Lifetime access on web, mobile, and offline
Certificate of completion included with purchase
Direct instructor Q&A and active student community
OpenCourser Verified Partner Policy details last reviewed: 2026-10-22
Our mission

OpenCourser helps millions of learners each year. People visit us to learn workspace skills, ace their exams, and nurture their curiosity.

Our extensive catalog contains over 50,000 courses and twice as many books. Browse by search, by topic, or even by career interests. We'll match you to the right resources quickly.

Find this site helpful? Tell a friend about us.

Affiliate disclosure

We're supported by our community of learners. When you purchase or subscribe to courses and programs or purchase books, we may earn a commission from our partners.

Your purchases help us maintain our catalog and keep our servers humming without ads.

Thank you for supporting OpenCourser.

© 2016 - 2025 OpenCourser