SC-300 Course: Microsoft Identity and Access Administrator
Created by John Christopher
15.5 hours on-demand video
Course: Paid
https://www.udemy.com/course/sc-300-course-microsoft-identity-and-access-administrator/
SC-300 Course: Microsoft Identity and Access Administrator
Created by John Christopher
15.5 hours on-demand video
Course: Paid
https://www.udemy.com/course/sc-300-course-microsoft-identity-and-access-administrator/
Section 1: Introduction
1 Welcome to the SC-300 Course! 6:04
2 Understanding the Microsoft 365 and Azure Environment 1:48
3 A Solid Foundation of Active Directory Domains 12:11
4 A Solid Foundation of RAS, DMZ, and Virtualization 13:09
5 A Solid Foundation of the Microsoft Cloud Services 17:14
6 DO NOT SKIP: Azure AD is being renamed 3:28
7 DONT SKIP: Before beginning your account setup 4:48
8 Creating a trial Microsoft 365/Azure Account 17:08
9 IMPORTANT Using Assignments in the course 7:58
10 Questions for John Christopher 5:42
11 Order of concepts covered in the course 1:29
12 Certificate of Completion 0:33
Section 2: How to setup a Practice Lab
13 Introduction to building a practice lab 2:44
14 Downloading Windows Server 2022 ISO 1:10
15 Getting Hyper-V Installed on Windows 2:47
16 Creating a Virtual Switch in Hyper-V 2:28
17 Installing a Windows Server 2022 Virtual Machine 6:37
18 Downloading the Windows 11 ISO 2:02
19 Installing a Windows 11 virtual machine 9:30
20 Disable large send offload version 2 1:57
21 Setting up a domain controller 16:17
22 Joining Windows 11 to a domain 5:46
Section 3: Configure and manage a Microsoft Entra tenant
23 The First Concepts to know about Microsoft's Cloud Services 2:10
24 Basics of using the Microsoft cloud services portals 5:05
25 Understanding Microsoft Entra roles 16:03
26 Configure and manage built-in and custom Microsoft Entra roles 6:52
27 Recommend when to use administrative units 7:06
28 Configure and manage administrative units 12:23
29 Evaluate effective permissions for Microsoft Entra roles 2:54
30 Configure and manage domains in Microsoft Entra ID and Microsoft 365 11:11
31 Configure Company branding settings 2:39
32 Configure tenant properties, user settings, group settings, and device settings 16:32
33 PLEASE DO NOT SKIP THIS VIDEO 1:21
SIMULATION: Create a restricted AU for NY. Give the NY Admin the User Admin Role
34 DONT SKIP: Redoing simulations in the course 1:45
Section4: Create, configure, and manage Microsoft Entra identities
35 Understanding the concepts of Identities 12:20
36 Create, configure, and manage users 9:51
37 Understanding creation and management of Groups 10:07
38 Create, configure, and manage groups in the Microsoft 365 admin center 6:31
39 Create, configure, and manage groups in the Azure portal 10:21
40 Manage custom security attributes 12:21
41 Automate bulk operations by using the Microsoft Entra 4:55
42 Concepts of Entra ID device register vs device join 10:26
43 Manage device join to Microsoft Entra ID 5:21
44 Manage device registration Microsoft Entra ID 2:14
45 Assign, modify, and report on licenses 6:05
46 A Foundation of Administration with PowerShell 25:18:00
47 Understanding Microsoft Graph vs Traditional PowerShell 10:46
48 Installing and connecting to MS Graph to support cloud services with PowerShell 6:37
49 Using PowerShell to manage users, groups and bulk operations 20:50
SIMULATION: Create a user named Greg Johnson. Set Job Title, Department etc...
SIMULATION: Create a Dynamic Security group that contains only Windows devices..
Section 5: Implement and manage identities for external users and tenants
50 Manage External collaboration settings in Microsoft Entra ID 6:29
51 Invite external users, individually or in bulk 3:33
52 Manage external user accounts in Microsoft Entra ID 2:16
53 Implement Cross-tenant access settings 5:31
54 Implement and manage cross-tenant synchronization 3:09
55 Configure external identity providers, including protocols such as SAML & WS-Fed 3:31
SIMULATION: Configure the external collaboration settings...
Section 6: Implement and manage hybrid identity
56 Entra Connect Sync, Entra Cloud Sync, password hash sync, pass-through, ADFS,SSO 18:27
57 Drawing out password hash sync, pass-through authentication, and AD FS 14:02
58 Fixing possible synchronization issues before hybrid setup using the IdFix tool 5:06
59 Implement and manage Microsoft Entra Connect Sync with password hash sync 23:23
60 Implement and manage Microsoft Entra Cloud Sync with password hash sync 22:58
61 Implement and manage Microsoft Entra Connect Health 2:42
SIMULATION: Use Entra Connect Health to view the alert error for NYC-DC1
Section 7: Plan, implement, and manage Microsoft Entra user authentication
62 Plan for authentication 16:24
63 Implement and manage authentication, certificate, temp access pass,OATH, & FIDO2 7:04
64 Concepts of tenant-wide Multi-factor Authentication (MFA) settings 11:01
65 Implement and manage tenant-wide Multi-factor Authentication (MFA) settings 12:37
66 Configure and deploy self-service password reset (SSPR) 5:25
67 Implement and manage Microsoft Entra password protection 8:12
SIMULATION: Enable QR code support and set require MFA to all users...
SIMULATION: Enable SSPR for all users and enable Email OTP...
Section 8: Plan, implement, and manage Microsoft Entra Conditional Access
68 Plan Conditional Access policies 11:28
69 Implement Conditional Access policy assignments and controls 11:38
70 Test and troubleshoot Conditional Access policies 4:46
71 Create a Conditional Access policy from a template 3:13
SIMULATION: Create a conditional access policy that blocks high risk Android...
Section 9: Manage risk by using Microsoft Entra ID Protection
72 Understanding Entra Identity Protection with User & Sign-in Risk Policies 11:35
73 Enabling & Monitoring Entra Identity Protection User & Sign-in Risk Policies 9:51
SIMULATION: Use Entra ID protection to set User Risk to Medium...
Section 10: Implement access management for Azure resources by using Azure roles
74 Create custom Azure roles, including both control plane & data plane permissions 8:38
75 Assign built-in and custom Azure roles 3:09
76 Evaluate effective permissions for a set of Azure roles 3:39
77 Assign Azure roles to enable Microsoft Entra ID login to Azure virtual machines 10:29
78 Configure Azure Key Vault role-based access control (RBAC) and access policies 7:19
Section 11: Implement Global Secure Access
79 Introduction to Global Secure Access 7:26
80 Deploy Global Secure Access clients 5:46
81 Deploy Private Access 2:42
82 Deploy Internet Access 1:56
83 Deploy Internet Access for Microsoft 365 1:46
84 Download and install the Global Secure Access client software 3:37
Section 12: Plan and implement identities for applications and Azure workloads
85 Select appropriate identities for applications and Azure workloads 7:23
86 Create managed identities 1:26
87 Assign a managed identity to an Azure resource 5:09
88 Use a managed identity assigned to an Azure resource to access other resources 6:17
Section 13: Plan, implement, and monitor the integration of enterprise applications
89 Plan and implement settings for enterprise applications, app & tenant level 9:53
90 Assign appropriate Microsoft Entra roles to users to manage enterprise apps 4:57
91 Design and implement integration for on-premises apps by using Entra App Proxy 8:27
92 Design and implement integration for software as a service (SaaS) apps 5:22
93 Assign, classify, and manage users, groups, and app roles for enterprise apps 8:38
94 Configure and manage user and admin consent 5:04
95 Create and manage application collections 3:15
Section 14: Plan and implement app registrations
96 Plan for app registrations 5:28
97 Create app registrations 4:06
98 Configure app authentication 5:33
99 Configure API permissions 3:19
100 Create app roles 3:40
Section 15: Manage and monitor app access by using Microsoft Defender for Cloud Apps
101 Understanding Microsoft Defender for Cloud Apps 11:33
102 Configure and analyze cloud discovery results by using Defender for Cloud Apps 6:52
103 Configure connected apps 4:06
104 Implement application-enforced restrictions 6:20
105 Conditional Access app control along with access and session policies 4:28
106 Implement and manage policies including OAuth apps 11:06
107 Manage the Cloud app catalog 5:48
SIMULATION: Use Defender for Cloud Apps & create a file policy for detection
Section 16: Plan and implement entitlement management in Microsoft Entra
108 Plan entitlements 5:32
109 Create and configure catalogs 3:08
110 Create and configure access packages 6:41
111 Manage access requests 4:49
112 Implement and manage terms of use (ToU) 6:24
113 Manage the lifecycle of external users 4:45
SIMULATION: Create an access request catalog & package for Medical User
Section 17: Plan, implement, and manage access reviews in Microsoft Entra
114 Plan, create, configure and manage Access Reviews in Entra ID 13:05
Section 18: Plan and implement privileged access
115 Understanding Privileged Identity Management (PIM) 7:47
116 Implementing & Configuring Privileged Identity Management (PIM) 7:29
117 Break-glass accounts 7:10
SIMULATION: Use PIM and make Adam Young eligible for User Administrator...
Section 19: Monitor identity activity by using logs, workbooks, and reports
118 Analyzing and investigating sign-in logs to troubleshoot access issues 8:06
119 Reviewing and monitoring Azure AD audit logs 6:18
120 Understanding the concepts of Microsoft Sentinel 8:44
121 Enabling Azure AD diagnostic logs with Log Analytics / Azure Sentinel 6:57
122 Azure AD activity by using Log Analytics / Sentinel, Workbooks excluding KQL use 14:49
123 Exporting sign-in and audit logs to a third-party SIEM 3:30
124 Configuring notifications 6:23
SIMULATION: Use Sentinel. Run Failed Login Attempt Query.