Tag: Compliance

Azure Arc Overview

Azure Arc for Developers, IT Pros, Cloud Architects, and Security Engineers

Azure Arc allows customers to extend Azure management and Azure services to anywhere. Now that said, this offers a lot of different opportunities and features depending on your job role. I wrote a couple of blog posts on our team blog on Microsoft Tech Community, to show the different Azure Arc capabilities in hybrid and multicloud environments to developers, IT Pros, Cloud Architects, and Security Engineers.

Here is an overview and some of the highlights of the blog posts. You can find more about each of these job roles here:

Azure Arc for Developers

Azure Arc and the Azure control plane enables developers to build hybrid and mutlicloud architectures for their applications. Taking advantage of the Azure control plane to manage infrastructure and allows to deploy Azure services anywhere. This allows customers to build cloud solutions and application architectures consistently, independent of where the application is running. Developers can use their favorite Azure services like WebApps or Azure SQL, and run their applications outside of Azure.

Azure Arc for Developers
Azure Arc for Developers

Highlights for Developers

  • Use the Azure Portal to gain central visibility
  • Manage Access
  • Enable your custom deployment locations
  • Run cloud-native apps on Azure PaaS anywhere
  • Azure Arc enabled Data Services
  • CI/CD workflow using GitOps – Azure Arc enabled Kubernetes
  • Access your Kubernetes Cluster from anywhere
  • Deploy and run Azure Kubernetes Services (AKS) on-premises on Azure Stack HCI
  • Run Machine Learning anywhere
  • Use Azure Managed Identities on-prem or at other cloud providers
  • Monitoring
  • and more
Azure Arc enabled Kubernetes GitOps Flow for Developer and DevOps
Azure Arc enabled Kubernetes GitOps Flow for Developer and DevOps

You can read the full Azure Arc for Developers blog post on Tech Community.

Azure Arc for IT Pros

Azure Arc simplifies governance and management by delivering a consistent multi-cloud and on-premises management platform. Azure Arc enables IT Professionals (IT Pros) to manage your entire environment, with a single pane of glass, by projecting your existing resources into Azure Resource Manager. You can now manage servers, Kubernetes clusters, and databases as if they are running in Azure. Regardless of where they live, you can use familiar Azure services and management capabilities. Azure Arc enables you to continue using traditional ITOps, while introducing DevOps practices to support new cloud-native patterns in your environment.

Azure Arc for IT Pros Monitoring
Azure Arc for IT Pros Monitoring

Highlights for IT Pros

  • Use the Azure Portal to gain central visibility
  • Organization and Inventory
  • Azure Resource Graph
  • Manage Access
  • Update Management
  • Monitoring
  • Log collection and analytics
  • Change Tracking and Inventory
  • Certificate Management
  • Security
  • Running Scripts against servers
  • Get compliance state
  • Manage your Azure Stack HCI

You can read the full Azure Arc for IT Pros blog post on Tech Community.

Azure Arc for Cloud Solutions Architects

Azure Arc and the Azure control plane enables Cloud Solutions Architects to build hybrid and mutlicloud architectures. Taking advantage of the Azure control plane to manage infrastructure and allows to deploy Azure services anywhere. This allows customers to build cloud solutions and applications architectures consistently, independent of where the application is running.

Azure Arc Cloud Architects - Architecture
Azure Arc Cloud Architects – Architecture

Highlights for Cloud Solutions Architects

  • Use the Azure Portal to gain central visibility
  • Organization and Inventory
  • Azure Resource Graph
  • Manage Access
  • Enable your custom deployment locations
  • Run cloud-native apps on Azure PaaS anywhere
  • Azure Arc enabled Data Services
  • CI/CD workflow using GitOps – Azure Arc enabled Kubernetes
  • Deploy and run Azure Kubernetes Services (AKS) on-premises on Azure Stack HCI
  • Use Azure Managed Identities on-prem or at other cloud providers
  • Run Machine Learning anywhere
  • Update Management
  • Monitoring
  • Log collection and analytics
  • Change Tracking and Inventory
  • Certificate Management
  • Security
  • Running Scripts against servers
  • Get compliance state
  • Manage your Azure Stack HCI

You can read the full Azure Arc for Cloud Solutions Architects blog post on Tech Community.

Azure Arc for Security Engineers

Azure Arc and the Azure control plane enables Security Engineers to take care of Cloud Governance and make sure that their hybrid and multi-cloud environment are configured in a secure and compliant state. In hybrid and multicloud environments, it can be difficult for Security Engineers to get a central view of all the resources they need to manage. Some of these resources are running in Azure, some on-premises, at branch offices, or even at other cloud providers. By connecting resources to the Azure Resource Manager using Azure Arc, Security Engineers can get central visibility and compliance states of a wide range of resources including Windows and Linux servers, SQL server, Kubernetes clusters, and Azure services running in Azure and outside of Azure.

Azure Arc for Security Engineers - Azure Policy Guest Configuration
Azure Arc for Security Engineers – Azure Policy Guest Configuration

Highlights for Security Engineers

  • Use the Azure Portal to gain central visibility
  • Organization and Inventory
  • Azure Resource Graph
  • Manage Access
  • Update Management
  • Monitoring
  • Log collection and analytics
  • Change Tracking and Inventory
  • Certificate Management
  • Security
  • Get compliance state

You can read the full Azure Arc for Security Engineers blog post on Tech Community.



SC-900 security compliance and identity fundamentals

Passed SC-900 Microsoft Security Compliance and Identity Fundamentals

Yesterday it was time for me to take another Microsoft certification exam. This time it was one of the new Microsoft Security certification exams. I started with the basics and passed SC-900 Microsoft Security Compliance and Identity Fundamentals exam.

The high-level view of the skills measured in the exam:

  • Describe the concepts of security, compliance, and identity (5-10%)
  • Describe the capabilities of Microsoft identity and access management solutions (25-30%)
  • Describe the capabilities of Microsoft security solutions (30-35%)
  • Describe the capabilities of Microsoft compliance solutions (25-30%)

You can find more information on the exam website.

You can find all the resources I used to prepare and pass the exam on my SC-900 Microsoft Security, Compliance, and Identity Fundamentals Exam Study Guide.

Exam SC-900: Microsoft Security, Compliance, and Identity Fundamentals
This certification is targeted to those looking to familiarize themselves with the fundamentals of security, compliance, and identity (SCI) across cloud-based and related Microsoft services.

This is a broad audience that may include business stakeholders, new or existing IT professionals, or students who have an interest in Microsoft security, compliance, and identity solutions.

Candidates should be familiar with Microsoft Azure and Microsoft 365 and want to understand how Microsoft security, compliance, and identity solutions can span across these solution areas to provide a holistic and end-to-end solution.

Microsoft Learn

I am happy that I passed the SC-900 exam yesterday, and I will go on to do other security exams like the SC-200 and more in the next upcoming weeks.

If you want to learn more about Microsoft Certification, check out my following blogs:

Also, check out other Microsoft Azure Certification Exam Study Guides:



SC-900 Exam Study Guide Microsoft Security Compliance and Identity Fundamentals

SC-900 Study Guide Microsoft Security, Compliance, and Identity Fundamentals

Microsoft just released a couple of new Microsoft certifications focused on security. Of course, these exams are on my list to take, so that is why I want to share my SC-900: Microsoft Security, Compliance, and Identity Fundamentals Certification Exam Study Guide for 2021 with you. To learn and prepare for the exam, I usually use a couple of online resources, mainly Microsoft Docs and Microsoft Learn, which I am going to share with you. You can find more information about how I prepare for a Microsoft Certification exam on my blog post: How to prepare and pass Microsoft Certification Exam.

Also, check out other Microsoft Azure Certification Exam Study Guides:

If you want to learn more about how to get started with Azure, I recommend my blog post: How to get started learning Microsoft Azure and Cloud Computing

Here is my SC-900Microsoft Security, Compliance, and Identity Fundamentals Certification Exam Study Guide

It is essential to get familiar with the exam objectives and skills measured first. That is why I recommend reading the description of the exam and the skills measured.

Exam SC-900: Microsoft Security, Compliance, and Identity Fundamentals
This certification is targeted to those looking to familiarize themselves with the fundamentals of security, compliance, and identity (SCI) across cloud-based and related Microsoft services.

This is a broad audience that may include business stakeholders, new or existing IT professionals, or students who have an interest in Microsoft security, compliance, and identity solutions.

Candidates should be familiar with Microsoft Azure and Microsoft 365 and want to understand how Microsoft security, compliance, and identity solutions can span across these solution areas to provide a holistic and end-to-end solution.

Microsoft Learn

The high-level view of the skills measured in the exam:

  • Describe the concepts of security, compliance, and identity (5-10%)
  • Describe the capabilities of Microsoft identity and access management solutions (25-30%)
  • Describe the capabilities of Microsoft security solutions (30-35%)
  • Describe the capabilities of Microsoft compliance solutions (25-30%)

You can find more information on the exam website.

Free Online Microsoft Learn SC-900 Exam Study Guide resources

Free Online Microsoft Learn AZ-900 Exam Study Guide resources

I personally believe if you are going through the Azure Fundamentals learning path on Microsoft Learn, you should be able to pass the exam. Microsoft Learn provides you with free online training and learning paths for different Microsoft technologies. They not just offer reading material, but also control questions and free online labs. Here are some relevant Microsoft Learn modules and learning paths for the SC-900 Microsoft Security, Compliance, and Identity Fundamentals Certification Exam. Microsoft Learn is an important part of my SC-900 exam study guide.

Free Azure Account

I also highly recommend that you create a free Azure account to try out the Azure services and get familiar with the Azure platform.

Create a free Azure Account 

If you don’t have an Azure account yet, you can sign up today for your free Azure account and receive 12 months of free popular services, $200 free credit, and 25+ always free services.

Microsoft Docs SC-900 study guide resources

One thing I always used to prepare for my Microsoft exams is Microsoft Docs. Here are the relevant Microsoft Docs which I used to prepare and study for the SC-900 exam.

Describe the Concepts of Security, Compliance, and Identity (5-10%)

Describe security methodologies

Describe security concepts

Describe Microsoft Security and compliance principles

Describe the capabilities of Microsoft Identity and Access Management Solutions (25-30%)

Define identity principles/concepts

Describe the basic identity services and identity types of Azure AD

Describe the authentication capabilities of Azure AD

Describe access management capabilities of Azure AD

Describe the identity protection & governance capabilities of Azure AD

Describe the capabilities of Microsoft Security Solutions (30-35%)

Describe basic security capabilities in Azure

Describe security management capabilities of Azure

Describe security capabilities of Azure Sentinel

Describe threat protection with Microsoft 365 Defender (formerly Microsoft Threat Protection)

Describe security management capabilities of Microsoft 365

Describe endpoint security with Microsoft Intune

Describe the Capabilities of Microsoft Compliance Solutions (25-30%)

Describe the compliance management capabilities in Microsoft

Describe information protection and governance capabilities of Microsoft 365

Describe insider risk capabilities in Microsoft 365

Describe the eDiscovery capabilities of Microsoft 365

Describe the audit capabilities in Microsoft 365

Describe resource governance capabilities in Azure

SC-900 Microsoft Security, Compliance, and Identity Fundamentals Study Guide Tips and Resources

I hope this SC-900 Microsoft Security, Compliance, and Identity Fundamentals Certification Exam Study Guide helps you pass the exam and get other Microsoft Security certifications. I also recommend that you open a free Azure account if you don’t have one yet. You can create your free Azure account here. Also, check out my blog posts about Microsoft Azure Certification:

I hope you enjoyed my SC-900 Study Guide and it helps you with exam prep. Did I miss any link, or do you have any recommended SC-900 Microsoft Security, Compliance, and Identity Fundamentals Certification Exam Study resources? Let me know in the comments.