Application and DevSecOps security

SC-100 · Design security solutions for applications and data · Updated

Secure the app lifecycle with SDL, threat modeling, GitHub Advanced Security, Defender for DevOps, API Management, Key Vault and managed identities.

This lesson is part of full SC-100 access

The first 2 SC-100 lessons are free. Full access opens every lesson with its practice questions, and the exam-style SC-100 question bank.

In this lesson
  • Secure development lifecycle
  • Secrets and identities
  • Web, API and app platform
  • Containers and Kubernetes
  • Exam traps
  • Practice questions

Get full access Try the free practice exam Log in

SC-100 course outline

All 7 lessons · Course overview
  1. Zero Trust, MCRA and Microsoft frameworksDesign solutions that align with security best practices and priorities Free
  2. Microsoft cloud security benchmark and complianceDesign solutions that align with security best practices and priorities Free
  3. Security operations with Sentinel and Defender XDRDesign security operations, identity and compliance capabilities Full access
  4. Identity design with Microsoft EntraDesign security operations, identity and compliance capabilities Full access
  5. Securing infrastructure, network and backupsDesign security solutions for infrastructure Full access
  6. Application and DevSecOps securityDesign security solutions for applications and data Full access
  7. Data protection with Purview and Azure data servicesDesign security solutions for applications and data Full access