Microsoft Defender XDR
Microsoft Defender XDR is an extended detection and response suite unifying signals across endpoints, identities, email, and cloud apps. SC-100 covers designing XDR-based security operations.
All SC-100 Terms
Zero Trust
Zero Trust is a security model that assumes breach and verifies each request explicitly rather than trusting anything inside a perimeter.
MCRA
The Microsoft Cybersecurity Reference Architectures (MCRA) are Microsoft's reference diagrams and guidance for designing security capabilities.
MCSB
The Microsoft Cloud Security Benchmark (MCSB) is a set of security best-practice controls for cloud workloads.
Cloud Adoption Framework
The Microsoft Cloud Adoption Framework for Azure (CAF) is guidance for strategy, governance, and secure adoption of Azure.
Azure landing zone
An Azure landing zone is a pre-configured, governed environment that applies security and governance baselines for workloads.
Microsoft Defender for Cloud
Microsoft Defender for Cloud is a service providing cloud security posture management and workload protection across Azure, hybrid, and multicloud.
Secure Score
Microsoft Secure Score is a measurement of an organization's security posture with recommendations to improve it.
Microsoft Sentinel
Microsoft Sentinel is a cloud-native SIEM and SOAR platform.
Microsoft Defender XDR
Microsoft Defender XDR is an extended detection and response suite unifying signals across endpoints, identities, email, and cloud apps.
MITRE ATT&CK
MITRE ATT&CK is a knowledge base of adversary tactics and techniques used to evaluate detection coverage.
Privileged Identity Management
Privileged Identity Management (PIM) provides just-in-time, approval-based access to privileged roles in Microsoft Entra.
Enterprise access model
The enterprise access model is Microsoft's framework for structuring and tiering privileged access.
Microsoft Purview
Microsoft Purview is a suite of data governance and compliance solutions covering classification, DLP, and audit.
Azure Key Vault
Azure Key Vault is a service for securely storing and controlling access to secrets, keys, and certificates.