Security operations with Sentinel and Defender XDR

SC-100 · Design security operations, identity and compliance capabilities · Updated

Design SIEM, SOAR and XDR with Microsoft Sentinel and Defender XDR, including connectors, analytics rules, playbooks, UEBA and the unified portal.

This lesson is part of full SC-100 access

The first 2 SC-100 lessons are free. Full access opens every lesson with its practice questions, and the exam-style SC-100 question bank.

In this lesson
  • SIEM, SOAR and XDR
  • Sentinel building blocks
  • Automation
  • Cost and data design
  • Multicloud and hybrid
  • Exam traps
  • Practice questions

Get full access Try the free practice exam Log in

SC-100 course outline

All 7 lessons · Course overview
  1. Zero Trust, MCRA and Microsoft frameworksDesign solutions that align with security best practices and priorities Free
  2. Microsoft cloud security benchmark and complianceDesign solutions that align with security best practices and priorities Free
  3. Security operations with Sentinel and Defender XDRDesign security operations, identity and compliance capabilities Full access
  4. Identity design with Microsoft EntraDesign security operations, identity and compliance capabilities Full access
  5. Securing infrastructure, network and backupsDesign security solutions for infrastructure Full access
  6. Application and DevSecOps securityDesign security solutions for applications and data Full access
  7. Data protection with Purview and Azure data servicesDesign security solutions for applications and data Full access