Opleiding: Microsoft Cybersecurity Architect (SC-100) [M-SC100]

OVERVIEW

Learn how to design and architect solutions using zero trust principles and specify security requirements for cloud infrastructure in different service models (SaaS, PaaS, IaaS).

This is an advanced, expert-level course. Although not required to attend, students are strongly encouraged to have taken and passed another associate level certification in the security, compliance and identity portfolio (such as AZ-500, SC-200 or SC-300) before attending this class. This course prepares students with the expertise  to design and evaluate cybersecurity strategies in the following areas: Zero Trust, Governance Risk Compliance (GRC), security operations (SecOps), and data and applications. Students will also learn how to design and architect solutions using zero trust principles and specify security requirements for cloud infrastructure in different service models (SaaS, PaaS, IaaS).

Updated 22/4/2026

OBJECTIVES

Students will learn to:

• Design an end‑to‑end cybersecurity strategy aligned with business objectives and risk priorities
• Architect Zero Trust security solutions using Microsoft security best practices and reference architectures
• Design identity, device, application, data, AI, network, and infrastructure security strategies
• Evaluate and design Governance, Risk, and Compliance (GRC) technical strategies
• Design security operations and monitoring solutions using Microsoft Defender and Microsoft Sentinel
• Design infrastructure security solutions across hybrid and multicloud environments
• Architect application and data security solutions, including protection for cloud workloads
• Translate security strategy into actionable architecture guidance for engineering and security teams
  

AUDIENCE

This course is for experienced cloud security engineers who have taken a previous certification in the security, compliance and identity portfolio. Specifically, students should have advanced experience and knowledge in a wide range of security engineering areas, including identity and access, platform protection, security operations, securing data, and securing applications. They should also have experience with hybrid and cloud implementations. Beginning students should instead take the course SC-900: Microsoft Security, Compliance, and Identity Fundamentals.

CERTIFICATION

Microsoft Certified: Cybersecurity Architect Expert

NEXT STEP

CONTENT

Module 1:  Design solutions that align with security best practices and prioritiesIntroduction to Zero Trust and best practice frameworks

• Design security solutions that align with the Cloud Adoption Framework (CAF) and Well-Architected Framework (WAF)
• Design solutions that align with the Microsoft Cybersecurity Reference Architecture (MCRA) and Microsoft cloud security benchmark (MCSB)
• Design a resiliency strategy for ransomware and other attacks based on Microsoft Security Best Practices

Module 2:  Design security operations, identity, and compliance capabilitiesDesign solutions for regulatory compliance

• Design solutions for identity and access management
• Design solutions for securing privileged access
• Design solutions for security operations
• Interactive case study: Modernizing identity and data security

Module 3:   Design security solutions for applications and data

• Design solutions for securing Microsoft 365
• Design solutions for securing applications
• Design solutions for securing an organization's data
• Interactive case study: Securing apps and data

Module 4:  Design security solutions for infrastructureEvaluate solutions for securing Microsoft 365

• Design solutions for securing applications
• Design solutions for securing an organization's data
• Interactive case study: Securing apps and data

Module 5: Design security solutions for infrastructure

• Specify requirements for securing SaaS, PaaS, and IaaS services
• Design solutions for security posture management in hybrid and multicloud environments
• Design solutions for securing server and client endpoints
• Design solutions for network security
• Interactive case study: Securing endpoints and infrastructure