SC-300: Implement an Authentication and Access Management solution

In this module, you will:

• Learn about Azure AD Multi-Factor Authentication (Azure AD MFA)
• Create a plan to deploy Azure AD MFA
• Turn on Azure AD MFA for users and specific apps

By the end of this module, you will be able to:

• Administer authentication methods (FIDO2 / Passwordless)
• Implement an authentication solution based on Windows Hello for Business
• Configure and deploy self-service password reset
• Deploy and manage password protection
• Implement and manage tenant restrictions

By the end of this module, you will be able to:

• Plan and implement security defaults.
• Plan Conditional Access policies.
• Implement Conditional Access policy controls and assignments (targeting, applications, and conditions).
• Test and troubleshoot Conditional Access policies.
• Implement application controls.
• Implement session management.
• Configure smart lockout thresholds.

By the end of this module you will be able to:

• Implement and manage a user risk policy
• Implement and manage sign-in risk policies
• Implement and manage MFA registration policy
• Monitor, investigate, and remediate elevated risky users

• Introduction
• What is Azure AD Multi-Factor Authentication?
• Plan your multi-factor authentication deployment
• Exercise - Enable Azure AD Multi-Factor Authentication
• Configure multi-factor authentication methods
• Summary

• Introduction
• Administer FIDO2 and passwordless authentication methods
• Implement an authentication solution based on Windows Hello for Business
• Exercise configure and deploy self-service password reset
• Deploy and manage password protection
• Implement and manage tenant restrictions
• Knowledge check
• Summary and resources

• Introduction
• Plan security defaults
• Exercise - Work with security defaults
• Plan Conditional Access policies
• Implement Conditional Access policy controls and assignments
• Exercise - Implement Conditional Access policies roles and assignments
• Test and troubleshoot Conditional Access policies
• Implement application controls
• Implement session management
• Exercise - Configure authentication session controls
• Configure smart lockout thresholds
• Exercise - Manage Azure Active Directory smart lockout values
• Knowledge check
• Summary and resources

• Introduction
• Review identity protection basics
• Implement and manage user risk policy
• Exercise enable sign-in risk policy
• Exercise configure Azure Active Directory multi-factor authentication registration policy
• Monitor, investigate, and remediate elevated risky users
• Knowledge check
• Summary and resources