Название: Exam Ref SC-200 Microsoft Security Operations Analyst, 2nd Edition
Автор: Yuri Diogenes, Sarah Young
Издательство: Pearson Education
Год: 2026
Страниц: 452
Язык: английский
Формат: epub
Размер: 51.9 MB
Prepare for Microsoft Exam SC-200 and help demonstrate your real-world mastery of skills and knowledge required to work with stakeholders to secure IT systems, and to rapidly remediate active attacks. Designed for Microsoft security operations analysts, this Exam Ref focuses on the critical thinking and decision-making acumen needed for success at the Microsoft Certified Associate level. Exam SC-200 focuses on knowledge needed to detect, investigate, and remediate security threats across cloud and on-premises environments by equipping security operations analysts with the skills to manage and operate a modern SOC using Microsoft Defender XDR, Microsoft Sentinel, Microsoft Defender for Cloud, and Security Copilot; configure and manage a security operations environment by designing Sentinel workspaces, optimizing data sources, managing assets through Defender Vulnerability Management and Exposure Management, and configuring automation and attack disruption; configure protections and detections across Defender solutions; assess incident response capabilities, including investigating and remediating threats such as ransomware, email compromise, compromised identities, insider risks, and cloud workload attacks using investigation tools, device timelines, live response, playbooks, and automation.