{"id":5040,"date":"2024-12-03T11:52:42","date_gmt":"2024-12-03T11:52:42","guid":{"rendered":"https:\/\/davidpapkin.net\/?page_id=5040"},"modified":"2024-12-03T11:52:42","modified_gmt":"2024-12-03T11:52:42","slug":"microsoft-azure-sc-200-info-by-david-papkin","status":"publish","type":"page","link":"https:\/\/davidpapkin.com\/?page_id=5040","title":{"rendered":"Microsoft Azure SC-200 info by David Papkin"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>THIS&nbsp;DAVID PAPKIN PAGE INFO on <a href=\"https:\/\/learn.microsoft.com\/en-us\/credentials\/certifications\/security-operations-analyst\/?practice-assessment-type=certification\" target=\"_blank\" rel=\"noreferrer noopener\">MICROSOFT AZURE SC-200<\/a> COURSE<\/strong><\/p>\n\n\n\n<h1 class=\"wp-block-heading\">Microsoft Certified: Security Operations Analyst Associate<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Investigate, search for, and mitigate threats using <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/sentinel\/overview\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Sentinel<\/a>, <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/defender-for-cloud\/defender-for-cloud-introduction\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Defender for Cloud<\/a>, and <a href=\"https:\/\/www.microsoft.com\/en-sg\/security\/business\/siem-and-xdr\/microsoft-defender-office-365\">Microsoft 365 Defender<\/a> &#8211; Integrated cyberthreat protection for your email and collaboration tools.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">     <a href=\"https:\/\/learn.microsoft.com\/en-us\/defender-xdr\/investigate-incidents?view=o365-worldwide#summary\" target=\"_blank\" rel=\"noreferrer noopener\">Investigate incidents in the Microsoft Defender portal<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/sentinel\/overview\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Sentinel<\/a> &#8211; a scalable, cloud-native security information and event management (SIEM) that delivers an intelligent and comprehensive solution for SIEM and security orchestration, automation, and response (SOAR). Microsoft Sentinel provides cyberthreat detection, investigation, response, and proactive hunting, with a bird&#8217;s-eye view across your enterprise.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/defender-for-cloud\/defender-for-cloud-introduction\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Defender for Cloud<\/a> &#8211; cloud-native application protection platform (CNAPP) that is made up of security measures and practices that are designed to protect cloud-based applications from various cyber threats and vulnerabilities.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.microsoft.com\/en-sg\/security\/business\/siem-and-xdr\/microsoft-defender-xdr\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Defender XDR<\/a>(&nbsp;<mark>Extended Detection and Response)<\/mark>, a security platform that uses AI and automation to help organizations detect and respond to cyberattacks.&nbsp;It provides a holistic approach to cybersecurity by integrating detection, investigation, and response capabilities across a variety of domains.&nbsp; <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">     <a href=\"https:\/\/learn.microsoft.com\/en-us\/training\/modules\/introduction-microsoft-365-threat-protection\/2-explore-extended-detection-response-use-cases\" target=\"_blank\" rel=\"noreferrer noopener\">Explore Extended Detection &amp; Response (XDR) response use cases<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/purview\/\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Purview<\/a> is a comprehensive portfolio of products spanning data governance, data security, and risk and compliance solutions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">    <a href=\"https:\/\/learn.microsoft.com\/en-us\/purview\/audit-solutions-overview#comparison-of-key-capabilities\" target=\"_blank\" rel=\"noreferrer noopener\">Learn about auditing solutions in Microsoft Purview<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>SOAR &#8211; <\/strong>Microsoft offers <strong>SOAR<\/strong> (Security Orchestration, Automation, and Response) capabilities primarily through <strong>Microsoft Sentinel<\/strong>, its cloud-native SIEM (Security Information and Event Management) and SOAR solution.<\/p>\n\n\n\n<div class=\"wp-block-group is-vertical is-layout-flex wp-container-core-group-is-layout-4fc3f8e1 wp-block-group-is-layout-flex\">\n<h3 class=\"wp-block-heading\">Key Features of Microsoft Sentinel SOAR Capabilities:<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Playbooks<\/strong>: Sentinel integrates with <strong>Azure Logic Apps<\/strong> to create playbooks that automate workflows for incident response. These playbooks can:\n<ul class=\"wp-block-list\">\n<li>Contain predefined steps for handling specific security events.<\/li>\n\n\n\n<li>Integrate with various third-party tools and Microsoft services for automated responses.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Automation Rules<\/strong>: Allows the triggering of playbooks and other responses automatically when specific conditions in incidents or alerts are met.<\/li>\n\n\n\n<li><strong>Threat Intelligence<\/strong>: Sentinel enables orchestration of threat intelligence for automated enrichment of alerts, providing more context for incident handling.<\/li>\n\n\n\n<li><strong>Custom Connectors<\/strong>: Sentinel can connect to external APIs and systems to enable complex automations across hybrid environments.<\/li>\n<\/ol>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/credentials\/certifications\/security-operations-analyst\/?practice-assessment-type=certification\" target=\"_blank\" rel=\"noreferrer noopener\">SC-200 Courseware<\/a> (Microsoft Learn)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>KQL<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">KQL quick reference:&nbsp;<a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/data-explorer\/kql-quick-reference\">https:\/\/docs.microsoft.com\/en-us\/azure\/data-explorer\/kql-quick-reference<\/a><br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Query best practices:&nbsp;<a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/data-explorer\/kusto\/query\/best-practices\">https:\/\/docs.microsoft.com\/en-us\/azure\/data-explorer\/kusto\/query\/best-practices<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/microsoftlearning.github.io\/SC-200T00A-Microsoft-Security-Operations-Analyst\/Instructions\/Labs\/LAB_AK_04_Lab1_Ex1_KQL.html\" target=\"_blank\" rel=\"noreferrer noopener\">KQL Lab Instructions demo<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Labs<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/microsoftlearning.github.io\/SC-200T00A-Microsoft-Security-Operations-Analyst\/\" target=\"_blank\" rel=\"noreferrer noopener\">SC-200 labs<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/mslabs.cloudguides.com\/guides\/SC-200%20Lab%20Simulations%20-%20Microsoft%20Security%20Operations%20Analyst\" target=\"_blank\" rel=\"noreferrer noopener\">SC-200 Interactive Simulations<\/a>(6-22 are Sentinel related)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Logs<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/logs\/create-custom-table-auxiliary?toc=%2Fazure%2Fsentinel%2FTOC.json&amp;bc=%2Fazure%2Fsentinel%2Fbreadcrumb%2Ftoc.json\" target=\"_blank\" rel=\"noreferrer noopener\">Set up a table with the Auxiliary plan in your Log Analytics workspace<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/sentinel\/basic-logs-use-cases?source=recommendations\" target=\"_blank\" rel=\"noreferrer noopener\">Log sources to use for Auxiliary Logs ingestion<\/a>(When to use Auxiliary Logs in Sentinel)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Demos<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/mslearn.cloudguides.com\/en-us\/guides\/Detect%20and%20respond%20to%20modern%20attacks%20with%20unified%20SIEM%20and%20XDR%20capabilities\" target=\"_blank\" rel=\"noreferrer noopener\">Detect and respond to modern attacks with unified SIEM and XDR capabilities<\/a>(12 min)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/mslearn.cloudguides.com\/guides\/Protect%20your%20organization%20with%20Microsoft%20365%20Defender\" target=\"_blank\" rel=\"noreferrer noopener\">Protect your organization with Microsoft 365 Defender<\/a>(10 min)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/aka.ms\/MSDefenderforIdentity-IG\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Defender for Identity<\/a>(30 min)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/aka.ms\/DetectThreats-ManageAlerts-MCAS_InteractiveGuide\" target=\"_blank\" rel=\"noreferrer noopener\">How Microsoft Defender for Cloud Apps identifies and investigates risks<\/a>(11 min)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/mslearn.cloudguides.com\/guides\/Minimize%20internal%20risks%20with%20insider%20risk%20management%20in%20Microsoft%20365\" target=\"_blank\" rel=\"noreferrer noopener\">Insider Risk Management<\/a>(17 min)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/mslabs.cloudguides.com\/guides\/SC-200%20Lab%20Simulation%20-%20Connect%20data%20to%20Microsoft%20Sentinel%20using%20data%20connectors\" target=\"_blank\" rel=\"noreferrer noopener\">Connect data to Microsoft Sentinel using data connectors<\/a>(7 min)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/aka.ms\/MSDE-IG\" target=\"_blank\" rel=\"noreferrer noopener\">Interactive Guide: Investigate and remediate threats with Microsoft Defender for Endpoint<\/a>(17 min)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/aka.ms\/MSDO-IG\" target=\"_blank\" rel=\"noreferrer noopener\">Safeguard your organization with Microsoft Defender for Office 365<\/a>(28 min)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/mslearn.cloudguides.com\/guides\/Investigate%20and%20respond%20to%20attacks%20with%20Microsoft%20Defender%20for%20Identity\" target=\"_blank\" rel=\"noreferrer noopener\">Interactive guide: Investigate and respond to attacks with Microsoft Defender for Identity<\/a>(14 min)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/mslearn.cloudguides.com\/guides\/Protect%20your%20hybrid%20cloud%20with%20Azure%20Security%20Center\" target=\"_blank\" rel=\"noreferrer noopener\">Interactive Guide: Manage your Security Posture with Microsoft Defender for Cloud<\/a>(19 min)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/aka.ms\/MSDE_TVM_IG\" target=\"_blank\" rel=\"noreferrer noopener\">Interactive Guide: Threat and Vulnerability Management<\/a>(13 min)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/mslearn.cloudguides.com\/guides\/Investigate%20security%20incidents%20in%20a%20hybrid%20environment%20with%20Azure%20Sentinel\" target=\"_blank\" rel=\"noreferrer noopener\">Interactive Guide: Detect and Respond to modern attacks with unified SIEM and XDR capabilities<\/a>(12 min)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Videos<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.microsoft.com\/en-us\/videoplayer\/embed\/RE4Bzwz?\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Threat Protection \u2013 Incident management<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.microsoft.com\/videoplayer\/embed\/RE4bOeh?rel=0\" target=\"_blank\" rel=\"noreferrer noopener\">Defender for Endpoint Automated Investigations<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.youtube.com\/watch?v=TCDxICrZQa8\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Defender for Endpoint &#8211; Discover Devices<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.microsoft.com\/en-us\/videoplayer\/embed\/RE4bGqo?rel=0&amp;postJsllMsg=true\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Defender for Endpoint: Advanced hunting<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.microsoft.com\/en-us\/videoplayer\/embed\/RE4bJ2a?rel=0&amp;postJsllMsg=true\" target=\"_blank\" rel=\"noreferrer noopener\">Role-based access control \u2013 Microsoft Defender for Endpoint<\/a>(5 min)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/aka.ms\/MSDO-IG\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Defender for Office 365<\/a>(28 min)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.microsoft.com\/en-us\/videoplayer\/embed\/RWwJfU?rel=0\" target=\"_blank\" rel=\"noreferrer noopener\">Threat Analytics<\/a> (4 min )<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.youtube.com\/watch?v=N_z07d3eB94\" target=\"_blank\" rel=\"noreferrer noopener\">Threat Analytics<\/a> (youtube 4 min)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.microsoft.com\/en-us\/videoplayer\/embed\/RE4woug?postJsllMsg=true\" target=\"_blank\" rel=\"noreferrer noopener\">Attack surface reduction \u2013 Microsoft Defender for Endpoint<\/a>(7 min)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.microsoft.com\/en-us\/videoplayer\/embed\/RE4HjW2?rel=0&amp;postJsllMsg=true\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Defender for Endpoint: EDR in block mode<\/a>(4 min)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.microsoft.com\/en-us\/videoplayer\/embed\/RE4qLUW?rel=0&amp;postJsllMsg=true\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Defender for Endpoint: Live response<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/sec.ch9.ms\/ch9\/a775\/eefb5ef1-305b-47b2-9ab8-97270549a775\/ask-for-azure-lighthouse_high.mp4\" target=\"_blank\" rel=\"noreferrer noopener\">Azure Lighthouse explained<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><span style=\"text-decoration: underline;\">Lab issues<\/span><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Learning Path 3 &#8211; Lab 1 &#8211; <\/strong>Exercise 1 <strong>Enable Defender for Cloud<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Task 4 . Make sure Extensions are installed by following this:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Complete Task 4: Install Azure Arc on your on-premises server.<\/li>\n\n\n\n<li>Verify Connection: Ensure that WINServer shows a &#8216;Connected&#8217; status in Azure Arc under Machines.<\/li>\n\n\n\n<li>Check Extensions: Confirm that the Defender extension is &#8216;Enabled&#8217; and the Monitoring extension is &#8216;Installed&#8217;. If not, follow the steps below:<\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Enable Monitoring Extension: Click on the WINServer machine, go to settings, and select Extensions.<\/li>\n\n\n\n<li>Install AzureMonitorWindowsAgent: Install the AzureMonitorWindowsAgent.<\/li>\n\n\n\n<li>Verify Installation: Check the Machines page to ensure the status has changed to &#8216;Installed&#8217;.<\/li>\n<\/ul>\n\n\n\n<ol class=\"wp-block-list\" start=\"4\">\n<li>Data Collection Rules:  Log Analytics Workspace , Click on your workspace, then Agents.<\/li>\n\n\n\n<li>Follow from Step 6 of Task 5.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">No Getting Started tab available. Task 5 not needed anymore. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Learning Path 4 &#8211; Lab 1<\/strong> &#8211; Exercise 1 <strong>Creating queries for Sentinel using KQL<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">use <a href=\"https:\/\/aka.ms\/lademo\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/aka.ms\/lademo<\/a> for All KQL queries<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Learning Path6 &#8211; Lab 1<\/strong> &#8211; Exercise 2 &#8211; <strong>Connect Windows devices to Sentinel<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If &#8220;size unavailable for your subscription&#8221; error,<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">click &#8220;See all sizes&#8221;, D-series v6 and pick the cheapest one 2 vCPU and 8 GB Ram<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Learning Path 7 &#8211; Lab 1 &#8211; <\/strong>Exercise 3 &#8211; <strong>Create a Scheduled Query from a template<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Unable to create Incident rule.<br>Create new automation rule &#8211; Step 31 <strong>Select Save.<\/strong> Gives error :&#8221; Analytic rule name &#8220;unknown analytic rule. a different analytic rule must be selected&#8221;<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/davidpapkin.net\/wp-content\/uploads\/2024\/12\/WhatsApp-Image-2024-12-05-at-10.45.49_94ce0ead.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"473\" src=\"https:\/\/davidpapkin.net\/wp-content\/uploads\/2024\/12\/WhatsApp-Image-2024-12-05-at-10.45.49_94ce0ead-1024x473.jpg\" alt=\"\" class=\"wp-image-5082\" srcset=\"\/wp-content\/uploads\/2024\/12\/WhatsApp-Image-2024-12-05-at-10.45.49_94ce0ead-1024x473.jpg 1024w, \/wp-content\/uploads\/2024\/12\/WhatsApp-Image-2024-12-05-at-10.45.49_94ce0ead-300x139.jpg 300w, \/wp-content\/uploads\/2024\/12\/WhatsApp-Image-2024-12-05-at-10.45.49_94ce0ead-768x355.jpg 768w, \/wp-content\/uploads\/2024\/12\/WhatsApp-Image-2024-12-05-at-10.45.49_94ce0ead-1536x709.jpg 1536w, \/wp-content\/uploads\/2024\/12\/WhatsApp-Image-2024-12-05-at-10.45.49_94ce0ead.jpg 1600w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Helpful Azure&nbsp; learning links<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/security\/adoption\/mcra\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Cybersecurity Reference Architectures<\/a>(MCRA)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/security\/benchmark\/azure\/overview\" target=\"_blank\" rel=\"noreferrer noopener\">Overview of Microsoft cloud security benchmark<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft Learn \u2013<a href=\"https:\/\/learn.microsoft.com\/en-us\/training\/courses\/sc-300t00\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Identity and Access Administrator<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/training\/courses\/sc-200t00\">https:\/\/learn.microsoft.com\/en-us\/training\/courses\/sc-200t00<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/training\/paths\/implement-identity-management-solution\/\">https:\/\/learn.microsoft.com\/en-us\/training\/paths\/implement-identity-management-solution\/<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/credentials\/certifications\/identity-and-access-administrator\/?practice-assessment-type=certification\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Certified: Identity and Access Administrator Associate<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/docs.microsoft.com\/en-us\/learn\/browse\/\">https:\/\/docs.microsoft.com\/en-us\/learn<\/a>&nbsp;\u2013&nbsp;Learn new skills and discover the power of Microsoft products with step-by-step guidance. Start your journey today by exploring our learning paths and modules.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/azure.microsoft.com\/en-us\/blog\/\">Microsoft Azure Forums<\/a>&nbsp;&nbsp;The Azure forums are very active. You can search the threads for a<br>specific area of interest. You can also browse categories like Azure Storage, Pricing<br>and Billing, Azure Virtual Machines, and Azure Migrate.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/architecture\/\">Azure Architecture Center<\/a>&nbsp;&nbsp;Gain access to the Azure Application Architecture Guide,<br>Azure Reference Architectures, and the Cloud Design Patterns.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.microsoft.com\/en-us\/learning\/community-blog.aspx\">Microsoft Learning Community Blog<\/a>&nbsp;&nbsp;Get the latest information the certification<br>tests and exam study groups.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/channel9.msdn.com\/\">https:\/\/channel9.msdn.com\/<\/a>&nbsp;&nbsp;Channel 9 provides a wealth of informational videos, shows, and<br>events.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/channel9.msdn.com\/Shows\/Tuesdays-With-Corey\/\">Azure Tuesdays With Corey<\/a>&nbsp;&nbsp;Corey Sanders answers your questions about<br>Microsoft Azure \u2013 Virtual Machines, Web Sites, Mobile Services, Dev\/Test etc.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/channel9.msdn.com\/Shows\/Azure-Friday\">Azure Fridays<\/a>&nbsp;&nbsp;Join Scott Hanselman as he engages one-on-one with the engineers<br>who build the services that power Microsoft Azure as they demo capabilities,<br>answer Scott\u2019s questions, and share their insights.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/azure.microsoft.com\/en-us\/blog\/\">Microsoft Azure Blog<\/a>&nbsp;&nbsp;Keep current on what\u2019s happening in Azure, including what\u2019s<br>now in preview, generally available, news &amp; updates, and more.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">End of David Papkin&nbsp;<a href=\"https:\/\/learn.microsoft.com\/en-us\/credentials\/certifications\/security-operations-analyst\/?practice-assessment-type=certification\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Azure SC-200<\/a>&nbsp;page.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"http:\/\/davidpapkin.org\/\">http:\/\/davidpapkin.org\/<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">David Papkin&nbsp;favorite movies<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/en.wikipedia.org\/wiki\/GoodFellas\">Robert Deniro in GoodFellas<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>THIS&nbsp;DAVID PAPKIN PAGE INFO on MICROSOFT AZURE SC-200 COURSE Microsoft Certified: Security Operations Analyst Associate Investigate, search for, and mitigate threats using Microsoft Sentinel, Microsoft Defender for Cloud, and Microsoft 365 Defender &#8211; Integrated cyberthreat protection for your email and&hellip; <\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-5040","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/pages\/5040","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5040"}],"version-history":[{"count":0,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/pages\/5040\/revisions"}],"wp:attachment":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5040"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}