SC-200 Microsoft Security Operations Analyst

Buy Now

Price: $19.99

The Microsoft Security Operations Analyst collaborates with organizational stakeholders to secure information technology systems for the organization. Their goal is to reduce organizational risk by rapidly remediating active attacks in the environment, advising on improvements to threat protection practices, and referring violations of organizational policies to appropriate stakeholders.

Responsibilities include threat management, monitoring, and response by using a variety of security solutions across their environment. The role primarily investigates, responds to, and hunts for threats using Microsoft Azure Sentinel, Azure Defender, Microsoft 365 Defender, and third-party security products. Since the security operations analyst consumes the operational output of these tools, they are also a critical stakeholder in the configuration and deployment of these technologies.

Exam Topics:

Mitigate threats using Microsoft 365 Defender:

• Detect, investigate, respond, and remediate threats to the productivity environment by using Microsoft Defender for Office 365

• Detect, investigate, respond, and remediate endpoint threats by using Microsoft Defender for Endpoint

• Detect, investigate, respond, and remediate identity threats

• Manage cross-domain investigations in Microsoft 365 Defender Portal

Mitigate threats using Azure Defender:

• Design and configure an Azure Defender implementation

• Plan and implement the use of data connectors for ingestion of data sources in Azure Defender

• Manage Azure Defender alert rules

• Configure automation and remediation

• Investigate Azure Defender alerts and incidents

Mitigate threats using Azure Sentinel:

• Plan and Implement the use of Data Connectors for Ingestion of Data Sources in Azure Sentinel

• Manage Azure Sentinel analytics rules

• Configure Security Orchestration Automation and Remediation (SOAR) in Azure Sentinel

• Manage Azure Sentinel Incidents

• Use Azure Sentinel workbooks to analyze and interpret data

• Hunt for threats using the Azure Sentinel portal