Design solutions that align with security best practices and priorities
20–25% - Design resiliency and ransomware response, including BCDR and privileged access.
- Align designs with MCRA, MCSB, Zero Trust, and secure AI benchmarks.
- Design CAF, Well-Architected, landing zone, and DevSecOps security strategies.
Practice Security Best Practices Questions →
Design security operations, identity, and compliance capabilities
25–30% - Design XDR, SIEM, SOAR, logging, threat hunting, and MITRE ATT&CK coverage.
- Design Entra ID, agent identities, Conditional Access, privileged access, and secrets.
- Translate compliance requirements into Purview, Azure Policy, and Defender for Cloud controls.
Practice Operations, Identity & Compliance Questions →
Design security solutions for infrastructure
25–30% - Design hybrid and multicloud posture management with Defender for Cloud, Arc, and EASM.
- Specify security for servers, endpoints, IoT, OT, SaaS, PaaS, IaaS, and containers.
- Evaluate network security and Security Service Edge with Entra Internet Access and Private Access.
Practice Infrastructure Security Questions →
Design security solutions for applications and data
20–25% - Evaluate Microsoft 365 security posture, Defender, Intune, Purview, and Copilot data controls.
- Design application security, threat modelling, workload identities, APIs, and WAF.
- Design data discovery, encryption, Key Vault, and Defender for Storage and Databases.
Practice Applications & Data Security Questions →