Microsoft IT Specialization
Comprehensive Study Guide
Topics Covered
• Identity & Access Management (IAM)
• Microsoft Dynamics 365 & Power Platform
• Azure Storage & Managed Disks
• Data Warehousing & Data Analysis
• Cloud vs On-Premises Computing
• Security Frameworks & Threat Landscape
• Cybersecurity Threats
• Password Security
• Computer Memory & Storage
• Operating Systems
• Software Concepts & Maintenance
• Machine Learning & AI
• Hardware Components & Device Drivers
• Networking & Email Protocols
,1. Identity & Access Management (IAM)
Identity and Access Management (IAM) is a security framework that manages digital identities
and controls who can access what resources — across cloud, on-premises, and hybrid
environments.
What Does IAM Do?
IAM Component Description
Identity Management Creates, maintains, and deletes user accounts and digital
identities
Access Control Determines which users can access which resources
Authentication Verifies that a user is who they claim to be (e.g., passwords,
MFA)
Authorization Determines what an authenticated user is allowed to do
Auditing & Reporting Tracks and logs access events for compliance and review
Key IAM Concepts
• JEA: Just-Enough-Access (JEA)
◦ Grant users only the minimum permissions needed for their role
◦ Reduces the attack surface and limits damage if an account is compromised
◦ Example: A marketing employee should not have access to financial records
• JIT: Just-in-Time (JIT) Access
◦ Access is granted only when needed, and removed after a set period
◦ Prevents standing privileges that attackers can exploit
Policy When Access is Duration Purpose
Granted
Just-Enough-Access Always (but limited in Permanent Limit what a user can
(JEA) scope) do
Just-in-Time (JIT) Only when requested Temporary Limit when a user can
do it
Key Takeaways
✓ IAM manages who has access to what resources in an organization
✓ JEA = minimum permissions; JIT = temporary access on demand
, ✓ IAM works across cloud, on-premises, and hybrid environments
✓ Core functions: Authentication, Authorization, Auditing
2. Microsoft Dynamics 365 & Power Platform
Microsoft offers two closely related but distinct platforms: Dynamics 365 (CRM/ERP) and the
Power Platform (low-code tools). They work together but are not the same thing.
Microsoft Dynamics 365
• Formerly known as Microsoft CRM
• A suite of enterprise applications for business management including Sales, Finance,
Supply Chain, and Customer Service
• Built on its own infrastructure — not built on the Power Platform
• Uses Microsoft Dataverse (formerly Common Data Service) as its underlying data layer
Microsoft Power Platform
• A suite of low-code/no-code development tools
Tool Purpose
Power Apps Build custom business applications without heavy coding
Power Automate Automate workflows and repetitive tasks
Power BI Visualize and analyze business data
Power Virtual Agents Build chatbots without writing code
How They Relate
Key Distinction
Dynamics 365 is NOT built on the Power Platform.
However, both share the same data layer: Microsoft Dataverse.
Power Platform tools can extend and enhance Dynamics 365.
They are separate but deeply integrated Microsoft products.
Key Takeaways
Comprehensive Study Guide
Topics Covered
• Identity & Access Management (IAM)
• Microsoft Dynamics 365 & Power Platform
• Azure Storage & Managed Disks
• Data Warehousing & Data Analysis
• Cloud vs On-Premises Computing
• Security Frameworks & Threat Landscape
• Cybersecurity Threats
• Password Security
• Computer Memory & Storage
• Operating Systems
• Software Concepts & Maintenance
• Machine Learning & AI
• Hardware Components & Device Drivers
• Networking & Email Protocols
,1. Identity & Access Management (IAM)
Identity and Access Management (IAM) is a security framework that manages digital identities
and controls who can access what resources — across cloud, on-premises, and hybrid
environments.
What Does IAM Do?
IAM Component Description
Identity Management Creates, maintains, and deletes user accounts and digital
identities
Access Control Determines which users can access which resources
Authentication Verifies that a user is who they claim to be (e.g., passwords,
MFA)
Authorization Determines what an authenticated user is allowed to do
Auditing & Reporting Tracks and logs access events for compliance and review
Key IAM Concepts
• JEA: Just-Enough-Access (JEA)
◦ Grant users only the minimum permissions needed for their role
◦ Reduces the attack surface and limits damage if an account is compromised
◦ Example: A marketing employee should not have access to financial records
• JIT: Just-in-Time (JIT) Access
◦ Access is granted only when needed, and removed after a set period
◦ Prevents standing privileges that attackers can exploit
Policy When Access is Duration Purpose
Granted
Just-Enough-Access Always (but limited in Permanent Limit what a user can
(JEA) scope) do
Just-in-Time (JIT) Only when requested Temporary Limit when a user can
do it
Key Takeaways
✓ IAM manages who has access to what resources in an organization
✓ JEA = minimum permissions; JIT = temporary access on demand
, ✓ IAM works across cloud, on-premises, and hybrid environments
✓ Core functions: Authentication, Authorization, Auditing
2. Microsoft Dynamics 365 & Power Platform
Microsoft offers two closely related but distinct platforms: Dynamics 365 (CRM/ERP) and the
Power Platform (low-code tools). They work together but are not the same thing.
Microsoft Dynamics 365
• Formerly known as Microsoft CRM
• A suite of enterprise applications for business management including Sales, Finance,
Supply Chain, and Customer Service
• Built on its own infrastructure — not built on the Power Platform
• Uses Microsoft Dataverse (formerly Common Data Service) as its underlying data layer
Microsoft Power Platform
• A suite of low-code/no-code development tools
Tool Purpose
Power Apps Build custom business applications without heavy coding
Power Automate Automate workflows and repetitive tasks
Power BI Visualize and analyze business data
Power Virtual Agents Build chatbots without writing code
How They Relate
Key Distinction
Dynamics 365 is NOT built on the Power Platform.
However, both share the same data layer: Microsoft Dataverse.
Power Platform tools can extend and enhance Dynamics 365.
They are separate but deeply integrated Microsoft products.
Key Takeaways
