We're so confident of our products that we provide no hassle product exchange.
Skills measured
- Implement an authentication and access management solution (25-30%)
- Plan and implement an identity governance strategy (25-30%)
- Implement an identity management solution (25-30%)
- Implement access management for apps (10-15%)
For more information about the Microsoft SC-300 Exam visit the following reference link:
Microsoft SC-300 Exam's Reference link
Microsoft SC-300 Exam Syllabus Topics:
| Topic | Details |
|---|---|
Implement an Identity Management Solution (25-30%) | |
| Implement initial configuration of Azure Active Directory | - configure and manage Azure Active Directory roles - configure and manage custom domains - configure and manage device registration options - configure delegation by using administrative units - configure tenant-wide settings |
| Create, configure and manage identities | - create, configure and manage users - create, configure and manage groups - manage licenses |
| Implement and manage external identities | - manage external collaboration settings in Azure Active Directory - invite external users (individually or in bulk) - manage external user accounts in Azure Active Directory - configure identity providers (social and SAML/WS-fed) |
| Implement and manage hybrid identity | - implement and manage Azure Active Directory Connect (AADC) - implement and manage Azure AD Connect cloud sync - implement and manage Password Hash Synchronization (PHS) - implement and manage Pass-Through Authentication (PTA) - implement and manage seamless Single Sign-On (SSO) - implement and manage Federation (excluding manual ADFS deployments) - implement and manage Azure Active Directory Connect Health - troubleshoot synchronization errors |
Implement an Authentication and Access Management Solution (25-30%) | |
| Plan and implement Azure Multifactor Authentication (MFA) | - plan Azure MFA deployment (excluding MFA Server) - implement and manage Azure MFA settings - manage MFA settings for users |
| Manage user authentication | - administer authentication methods (FIDO2 / Passwordless) - implement an authentication solution based on Windows Hello for Business - configure and deploy self-service password reset - deploy and manage password protection - configure smart lockout thresholds - implement and manage tenant restrictions |
| Plan, implement and administer conditional access | - plan and implement security defaults - plan conditional access policies - implement conditional access policy controls and assignments (targeting, applications, and conditions) - testing and troubleshooting conditional access policies - implement application controls - implement session management |
| Manage Azure AD Identity Protection | - implement and manage a user risk policy - implement and manage sign-in risk policy - implement and manage MFA registration policy - monitor, investigate and remediate elevated risky users |
Implement Access Management for Apps (10-15%) | |
| Plan, implement, and monitor the integration of Enterprise Apps for SSO | - implement and configure consent settings - discover apps by using Microsoft Defender for Cloud Apps or ADFS application activity report - design and implement access management for apps - design and implement app management roles - monitor and audit access / Sign-ins to Azure Active Directory integrated enterprise applications - integrate on-premises apps by using Azure AD application proxy - integrate custom SaaS apps for SSO - configure pre-integrated (gallery) SaaS apps - implement application user provisioning |
| Implement app registrations | - plan your line of business application registration strategy - implement application registrations - configure application permissions - implement application authorization - plan and configure multi-tier application permissions |
Plan and Implement an Identity Governance Strategy (25-30%) | |
| Plan and implement entitlement management | - define catalogs - define access packages - plan, implement and manage entitlements - implement and manage terms of use - manage the lifecycle of external users in Azure AD Identity Governance settings |
| Plan, implement and manage access reviews | - plan for access reviews - create access reviews for groups and apps - monitor access review findings - manage licenses for access reviews - automate access review management tasks - configure recurring access reviews |
| Plan and implement privileged access | - define a privileged access strategy for administrative users (resources, roles, approvals, thresholds) - configure Privileged Identity Management for Azure AD roles - configure Privileged Identity Management for Azure resources - assign roles - manage PIM requests - analyze PIM audit history and reports - create and manage break-glass accounts |
| Monitor and maintain Azure Active Directory | - analyze and investigate sign-in logs to troubleshoot access issues - review and monitor Azure AD audit logs - enable and integrate Azure AD diagnostic logs with Log Analytics / Microsoft Sentinel - export sign-in and audit logs to a third-party SIEM - review Azure AD activity by using Log Analytics / Microsoft Sentinel, excluding KQL use - analyze Azure Active Directory workbooks / reporting - configure notifications |
Reference: https://docs.microsoft.com/en-us/learn/certifications/exams/sc-300
By Eli
