Samenvatting Microsoft SC-900 Compleet Handboek Nederlands – Security, Compliance & Identity Fundamentals

1

,Inhoudsopgave

Inleiding tot security, compliance en identity ................................................................................. 6

1. Shared Responsibility Model .................................................................................................... 7

2. Defense in depth (gelaagde beveiliging) ....................................................................................15

3. CIA Triad (BIV-driehoek): .........................................................................................................19

4. Zero trust model ....................................................................................................................23

5. Encryption (versleuteling) en Hashing (hashing) ........................................................................27

6. Governance, Risk, and Compliance (GRC) ................................................................................32

7. Describe Identity Concepts (identiteitsconcepten) ....................................................................37

8. Identity as the Primary Security Perimeter.................................................................................41

9. Modern Authentication en de rol van de Identity Provider (IdP) ....................................................46

10. The Concept of Directory Services .........................................................................................51

11. The Concept of Federation (federatie).....................................................................................55

Introduction to Microsoft Entra.....................................................................................................59

1. Introductie ............................................................................................................................59

2. Describe Microsoft Entra (Microsoft Entra beschrijven) ...............................................................60

3. Describe Microsoft Entra ID (Microsoft Entra ID beschrijven) .......................................................63

4. Describe types of identities (typen identiteiten beschrijven) ........................................................65

5. Describe Microsoft Entra Agent ID ...........................................................................................68

6. Describe hybrid identity (hybride identiteit beschrijven) ..............................................................70

7. Describe external identities (externe identiteiten beschrijven) .....................................................71

Module: Describe the Authentication Capabilities of Microsoft Entra ID .........................................73

1. Introductie ............................................................................................................................73

2. Describe Authentication Methods (verificatiemethoden beschrijven) ...........................................74

3. Describe Multi-Factor Authentication / MFA (meervoudige verificatie beschrijven) .........................78

4. Describe Self-Service Password Reset / SSPR (selfservice voor wachtwoordherstel beschrijven) ....80

5. Describe Password Protection and Management (wachtwoordbeveiliging en -beheer beschrijven) ..82

Module: Describe the Access Management Capabilities of Microsoft Entra ....................................84

1. Introductie ............................................................................................................................84

2. Describe Conditional Access (voorwaardelijke toegang beschrijven)............................................85

3. Describe Global Secure Access in Microsoft Entra .....................................................................88

4. Describe Microsoft Entra Roles and Role-Based Access Control (RBAC) .......................................91

Module: Describe the Identity Protection and Governance Capabilities of Microsoft Entra ..............94



2

, 1. Introductie ............................................................................................................................94

2. Describe Microsoft Entra ID Governance ..................................................................................95

3. Describe Entitlement Management (rechtenbeheer beschrijven) .................................................97

4. Describe Access Reviews (toegangsbeoordelingen beschrijven) .................................................99

5. Describe Privileged Identity Management / PIM ....................................................................... 101

6. Describe Microsoft Entra ID Protection ................................................................................... 103

7. Describe Microsoft Entra Verified ID ....................................................................................... 105

8. Describe Microsoft Entra Integration with Microsoft Security Copilot .......................................... 107

Module: Create, Configure, and Manage Identities ...................................................................... 109

1. Introductie .......................................................................................................................... 109

2. Create, Configure, and Manage Users (gebruikers aanmaken, configureren en beheren) .............. 110

3. Create, Configure, and Manage Groups (groepen aanmaken, configureren en beheren) ............... 111

4. Manage Licenses (licenties beheren) ..................................................................................... 112

5. Configure and Manage Device Registration (apparaatregistratie configureren en beheren) ............ 114

6. Create Custom Security Attributes (aangepaste beveiligingsattributen aanmaken) ...................... 117

7. Explore Automatic User Creation — SCIM en automatische inrichting ........................................ 118

Module: Describe Microsoft Security Copilot .............................................................................. 119

1. Introductie .......................................................................................................................... 119

2. Get Acquainted with Microsoft Security Copilot (kennismaking) ................................................ 120

3. Describe Microsoft Security Copilot Terminology (terminologie) ................................................ 122

4. Describe How Microsoft Security Copilot Processes Prompt Requests (promptverwerking) .......... 124

5. Describe the Elements of an Effective Prompt (elementen van een effectieve prompt) ................. 125

6. Describe How to Enable Microsoft Security Copilot (inschakelen) ............................................. 127

Module: Configure Workspaces for Microsoft Security Copilot .................................................... 130

1. Introductie .......................................................................................................................... 130
2. Plan a Workspace Deployment (workspace-implementatie plannen) ......................................... 131

3. Create a Security Copilot Workspace (workspace aanmaken) ................................................... 133

4. Configure Workspace Access and Settings (toegang en instellingen configureren) ....................... 135

5. Assign Workspaces for Integrated Agents (workspaces toewijzen voor geïntegreerde agents) ....... 137

6. Monitor and Manage Workspace Capacity (capaciteit monitoren en beheren) ............................. 139

Module: Manage Plugins and Agents in Microsoft Security Copilot ............................................... 141

1. Introductie .......................................................................................................................... 141

2. Configure Plugin Settings (plugin-instellingen configureren) ...................................................... 142




3

, 3. Discover and Set Up Microsoft-Built Agents (Microsoft-gebouwde agents ontdekken en instellen) . 144

4. Acquire and Configure Partner Agents from Security Store (partner-agents aanschaffen en
configureren) .......................................................................................................................... 146

5. Manage Security Copilot Agents (Security Copilot-agents beheren) ........................................... 148

Module: Describe Core Infrastructure Security Services in Azure ................................................. 150

1. Introductie .......................................................................................................................... 150

2. Describe Azure DDoS Protection ........................................................................................... 151

3. Describe Azure Firewall ........................................................................................................ 153

4. Describe Web Application Firewall (WAF) ............................................................................... 155

5. Describe Network Segmentation in Azure ............................................................................... 156

6. Describe Azure Network Security Groups (NSG’s) .................................................................... 158

7. Describe Azure Bastion ........................................................................................................ 160

8. Describe Azure Key Vault ...................................................................................................... 162

Module: Describe the Security Management Capabilities in Azure ............................................... 164

1. Introductie .......................................................................................................................... 164

2. Describe Microsoft Defender for Cloud................................................................................... 165

3. Describe How Security Policies, Standards, and Recommendations Improve Cloud Security Posture
............................................................................................................................................. 167

4. Describe Cloud Security Posture Management (CSPM) ............................................................ 169

5. Describe the Enhanced Security of Microsoft Defender for Cloud (CWPP) .................................. 171

6. Describe DevOps Security Management (DevSecOps) ............................................................. 173

Module: Describe the Security Management Capabilities in Azure ............................................... 175

1. Introductie .......................................................................................................................... 175

2. Describe Microsoft Defender for Cloud................................................................................... 176

3. Describe How Security Policies, Standards, and Recommendations Improve Cloud Security Posture
............................................................................................................................................. 178

4. Describe Cloud Security Posture Management (CSPM) ............................................................ 180

5. Describe the Enhanced Security of Microsoft Defender for Cloud (CWPP) .................................. 182

6. Describe DevOps Security Management (DevSecOps) ............................................................. 184

Module: Describe Threat Protection with Microsoft Defender XDR ............................................... 186

1. Introductie .......................................................................................................................... 186

2. Describe Microsoft Defender XDR Services ............................................................................. 187

3. Describe Microsoft Defender for Office 365............................................................................. 189

4. Describe Microsoft Defender for Endpoint .............................................................................. 190




4