Microsoft 365 Security Administration MS-500 Exam Guide

Plan and implement security and compliance strategies for Microsoft 365 and hybrid environments

Peter Rising 지음

Packt(GCO Science) 2020년 06월 19일 출간

작품소개

책소개

Get up to speed with expert tips and techniques to help you prepare effectively for the MS-500 Exam

▶Book Description
The Microsoft 365 Security Administration (MS-500) exam is designed to measure your ability to perform technical tasks such as managing, implementing, and monitoring security and compliance solutions for Microsoft 365 environments.

This book starts by showing you how to configure and administer identity and access within Microsoft 365. You will learn about hybrid identity, authentication methods, and conditional access policies with Microsoft Intune. Next, the book shows you how RBAC and Azure AD Identity Protection can be used to help you detect risks and secure information in your organization. You will also explore concepts, such as Advanced Threat Protection, Windows Defender ATP, and Threat Intelligence. As you progress, you will learn about additional tools and techniques to configure and manage Microsoft 365, including Azure Information Protection, Data Loss Prevention, and Cloud App Discovery and Security. The book also ensures you are well prepared to take the exam by giving you the opportunity to work through a mock paper, topic summaries, illustrations that briefly review key points, and real-world scenarios.

By the end of this Microsoft 365 book, you will be able to apply your skills in the real world, while also being well prepared to achieve Microsoft certification.

▶What You Will Learn
？Get up to speed with implementing and managing identity and access
？Understand how to employ and manage threat protection
？Get to grips with managing governance and compliance features in Microsoft 365
？Explore best practices for effective configuration and deployment
？Implement and manage information protection
？Prepare to pass the Microsoft exam and achieve certification with the help of self-assessment questions and a mock exam

▶Key Features
？Get the right guidance and discover techniques to improve the effectiveness of your studying and prepare for the exam
？Explore a wide variety of strategies for security and compliance
？Gain knowledge that can be applied in real-world situations

▶Who This Book Is For
This Microsoft certification book is designed to help IT professionals, administrators, or anyone looking to pursue a career in security administration by becoming certified with Microsoft's role-based qualification. Those trying to validate their skills and improve their competitive advantage with Microsoft 365 Security Administration will also find this book to be a useful resource.

목차

▶TABLE of CONTENTS
▷ Section 1: Configuring and Administering Identity and Access in Microsoft 365
？Chapter 1: Planning for Hybrid Identity
？Chapter 2: Authentication and Security
？Chapter 3: Implementing Conditional Access Policies
？Chapter 4: Role Assignment and Privileged Identities in Microsoft 365
？Chapter 5: Azure AD Identity Protection

▷ Section 2: Implementing and Managing Threat Protection
？Chapter 6: Configuring an Advanced Threat Protection Solution
？Chapter 7: Configuring Microsoft Defender ATP to Protect Devices
？Chapter 8: Message Protection in Office 365
？Chapter 9: Threat Intelligence and Tracking

▷ Section 3: Information Protection in Microsoft 365
？Chapter 10: Controlling Secure Access to Information Stored in Office 365
？Chapter 11: Azure Information Protection
？Chapter 12: Data Loss Prevention
？Chapter 13: Cloud App Discovery and Security

▷ Section 4: Data Governance and Compliance in Microsoft 365
？Chapter 14: Security Analytics and Auditing Capabilities
？Chapter 15: Personal Data Protection in Microsoft 365
？Chapter 16: Data Governance and Retention
？Chapter 17: Search and Investigation
？Chapter 18: Data Privacy Compliance

▷ Section 5: Mock Exam and Assessment
？Chapter 19: Mock Exam
？Chapter 20: Mock Exam Answers
？Chapter 21: Assessments

책 속으로

▶What this book covers
？ Chapter 1, Planning for Hybrid Identity, teaches you how to plan your hybrid environment with Azure AD Connect and introduces you to additional authentication security methods.

？ Chapter 2, Authentication and Security, covers the implementation of Azure AD dynamic groups, Azure AD self-service password reset (SSPR), multi-factor authentication (MFA), and how to perform Azure AD access reviews.

？ Chapter 3, Implementing Conditional Access Policies, explains the principles of Azure AD Conditional Access, how it integrates with Microsoft Intune, and how Conditional Access may be used with device- and app-based policies.

？ Chapter 4, Role Assignment and Privileged Identities in Microsoft 365, shows you how Role- Based Access Control (RBAC) is used to assign access to built-in Microsoft 365 roles, and how, with the help of Privileged Identity Management (PIM), you can reduce your permanently assigned admin roles and implement eligibility with just-in-time access.

？ Chapter 5, Azure AD Identity Protection, introduces the principles of Identity Protection, how to configure user- and sign-in-based risk policies, and how to manage and respond to alerts.

？ Chapter 6, Configuring an Advanced Threat Protection Solution, explains how to set up and manage an Azure ATP instance.

？ Chapter 7, Configuring Microsoft Defender ATP to Protect Devices, helps you to understand how to reduce your attack surface by configuring policies for Windows Defender Application Guard, Application Control, Exploit Guard, and Secure Boot. In addition, you will learn how BitLocker device encryption can protect Windows 10 devices.

？ Chapter 8, Message Protection in Office 365, covers how to protect users and domains with anti-phishing and anti-spam protection, and the application of safe attachments and safe links policies.

？ Chapter 9, Threat Intelligence and Tracking, shows you how to understand the threat management dashboard and how to use Threat Explorer and Threat Trackers. It also examines how to manage quarantined messages and files and perform controlled, simulated attacks.

？ Chapter 10, Controlling Secure Access to Information Stored in Office 365, explains the principles of privileged access management, Customer Lockbox, Azure B2B sharing for guest user access, and how to protect access to the collaboration components of Office 365.

？ Chapter 11, Azure Information Protection, explains how to plan, set up, and implement AIP labels to classify and protect content in Office 365, how to track and revoke protected content, and how the AIP scanner can autoclassify and protect on-premises SharePoint and file storage content.

？ Chapter 12, Data Loss Prevention, covers the planning and creation of DLP policies, the use of built-in sensitive information types, the creation of custom sensitive information types, and how to review DLP alerts.

？ Chapter 13, Cloud App Discovery and Security, demonstrates how Cloud App Security enables you to track your SaaS application usage, configure Cloud App Security with policies, integrate with Conditional Access, and navigate dashboards and logs.

？ Chapter 14, Security Analytics and Auditing Capabilities, provides an understanding of Desktop Analytics, Windows diagnostics, and Office Telemetry, and shows how to configure Office 365 auditing and complete an audit log search, and how you can configure alerting policies.

？ Chapter 15, Personal Data Protection in Microsoft 365, explains the process of conducting searches for personal data within Microsoft 365, how to use retention labels to protect personal data, and how to access logs to search for and monitor personal data leaks.

？ Chapter 16, Data Governance and Retention, teaches you how to understand data governance and retention requirements for your organization, how to configure retention tags and retention policies, supervision policies, and ...

출판사 서평

▶ Preface
In this book, you are going to learn how to manage security and compliance principles within your Microsoft 365 environments.

By the end of this guide, you will understand how to securely implement and manage hybrid identity, implement advanced security features in order to protect your users and devices, and deploy compliance and information protection features in order to ensure that business and regulatory requirements for your organization are being fulfilled.

작가정보

저자(글) Peter Rising

Peter Rising has over 25 years' experience in IT. He has worked for several IT solutions providers and private organizations in a variety of technical roles focusing on Microsoft technologies. Since 2014, Peter has specialized in the Microsoft Office 365 platform, initially carrying out mail migrations from on-premises platforms and tenant-to-tenant migrations. Since joining Softcat PLC in 2016, Peter has shifted his focus to Microsoft 365 Security and Compliance and is now a senior consultant in Softcat's public cloud technical practice. He holds a number of Microsoft certifications, including MCSE: Productivity; MCSA: Office 365; Microsoft 365 Certified: Enterprise Administrator Expert; and Microsoft 365: Security Administrator Associate.