Microsoft Certified: Security Operations Analyst Associate (SC-200)

On this accelerated Microsoft Certified: Security Operations Analyst Associate course, you’ll learn to investigate and respond to threats to your business using Microsoft Azure Sentinel, Azure Defender, Microsoft 365 Defender, and third-party security products.

In just 3 days, you’ll build knowledge on collaborating with stakeholders to secure information technology systems for your organisation. You’ll also learn how to:

• Reduce business risk by rapidly remediating active attacks in the environment
• Advising on improvements to threat protection practices
• Refer violations of business policies to appropriate stakeholders

At the end of this course, you’ll sit exam Exam SC-200: Microsoft Security Operations Analyst and achieve your certification. As Firebrand are a Microsoft Gold Partner for Learning, you’ll get access to the official exam, Microsoft Official Curriculum (MOCs) and learn from Microsoft Certified Trainers (MCTs).

Through Firebrand’s Lecture | Lab | Review methodology, you’ll achieve your certification twice as fast as traditional training.

SC-200: Microsoft Certified: Security Operations Analyst Associate:

• Module 1: Introduction to Microsoft Defender XDR threat protection
• Module 2: Mitigate incidents using Microsoft Defender XDR
• Module 3: Protect your identities with Entra ID Protection
• Module 4: Remediate risks with Microsoft Defender for Office 365
• Module 5: Safeguard your environment with Microsoft Defender for Identity
• Module 6: Secure your cloud apps and services with Microsoft Defender for Cloud Apps
• Module 7: Fundamentals of Generative AI
• Module 8: Describe Microsoft Copilot for Security
• Module 9: Describe the core features of Microsoft Copilot for Security
• Module 10: Describe the embedded experiences of Microsoft Copilot for Security
• Module 11: Respond to data loss prevention alerts using Microsoft 365
• Module 12: Manage insider risk in Microsoft Purview
• Module 13: Search and investigate with Microsoft Purview Audit
• Module 14: Investigate threats with Content search in Microsoft Purview
• Module 15: Protect against threats with Microsoft Defender for Endpoint
• Module 16: Deploy the Microsoft Defender for Endpoint environment
• Module 17: Implement Windows security enhancements with Microsoft Defender for Endpoint
• Module 18: Perform device investigations in Microsoft Defender for Endpoint
• Module 19: Perform actions on a device using Microsoft Defender for Endpoint
• Module 20: Perform evidence and entities investigations using Microsoft Defender for Endpoint
• Module 21: Configure and manage automation using Microsoft Defender for Endpoint
• Module 22: Configure for alerts and detections in Microsoft Defender for Endpoint
• Module 23: Utilize Vulnerability Management in Microsoft Defender for Endpoint
• Module 24: Plan for cloud workload protections using Microsoft Defender for Cloud
• Module 25: Connect Azure assets to Microsoft Defender for Cloud
• Module 26: Connect non-Azure resources to Microsoft Defender for Cloud
• Module 27: Manage your cloud security posture management
• Module 28: Explain cloud workload protections in Microsoft Defender for Cloud
• Module 29: Remediate security alerts using Microsoft Defender for Cloud

Before taking this accelerated course, you should have a basic understanding of the following topics:

• Microsoft 365
• Microsoft security, compliance, and identity products
• Azure services, specifically Azure SQL Database and Azure Storage
• Azure virtual machines and virtual networking
• Scripting concepts

And an intermediate understanding of the following:

• Windows 10

As part of this accelerated course, you'll sit for the following exam at the Firebrand Training centre, covered by your Certification Guarantee:

SC-200:

• Manage a security operations environment (20‚Äì25%)

• Configure protections and detections (15‚Äì20%)

• Manage incident response (35‚Äì40%)

• Perform threat hunting (15‚Äì20%)