• Implement initial configuration of Azure Active Directory
• Create, configure, and manage identities
• Implement and manage external identities (excluding B2C scenarios)
• Implement and manage hybrid identity

• Create, configure, and manage users
• Create, configure, and manage groups
• Manage licenses
• Explain custom security attributes and automatic user provisioning

• Manage external collaboration settings in Azure Active Directory
• Invite external users (individually or in bulk)
• Manage external user accounts in Azure Active Directory
• Configure identity providers (social and SAML/WS-fed)

• Plan, design, and implement Azure Active Directory Connect (AADC)
• Manage Azure Active Directory Connect (AADC)
• Manage password hash synchronization (PHS)
• Manage pass-through authentication (PTA)
• Manage seamless single sign-on (seamless SSO)
• Manage federation excluding manual ADFS deployments
• Troubleshoot synchronization errors
• Implement and manage Azure Active Directory Connect Health

• Learn about Azure AD Multi-Factor Authentication (Azure AD MFA)
• Create a plan to deploy Azure AD MFA
• Turn on Azure AD MFA for users and specific apps

• Administer authentication methods (FIDO2 / Passwordless)
• Implement an authentication solution based on Windows Hello for Business
• Configure and deploy self-service password reset
• Deploy and manage password protection
• Implement and manage tenant restrictions

• Plan and implement security defaults.
• Plan conditional access policies.
• Implement conditional access policy controls and assignments (targeting, applications, and conditions).
• Test and troubleshoot conditional access policies.
• Implement application controls.
• Implement session management.
• Configure smart lockout thresholds.

• Implement and manage a user risk policy
• Implement and manage sign-in risk policies
• Implement and manage MFA registration policy
• Monitor, investigate, and remediate elevated risky users

• Configure and use Azure roles within Azure AD
• Configure and managed identity and assign it to Azure resources
• Analyze the role permissions granted to or inherited by a user
• Configure access to data in Azure Key Vault using RBAC-policy

• Discover apps by using Microsoft Defender for Cloud Apps or Active Directory Federation Services app report.
• Design and implement access management for apps.
• Design and implement app management roles.
• Configure pre-integrated (gallery) SaaS apps.

• Implement token customizations
• Implement and configure consent settings
• Integrate on-premises apps by using Azure AD application proxy
• Integrate custom SaaS apps for SSO
• Implement application user provisioning
• Monitor and audit access/Sign-On to Azure Active Directory integrated enterprise applications

• Plan your line of business application registration strategy
• Implement application registrations
• Configure application permissions
• Plan and configure multi-tier application permissions

• Define catalogs.
• Define access packages.
• Plan, implement and manage entitlements.
• Implement and manage terms of use.
• Manage the lifecycle of external users in Azure AD Identity Governance settings.

• Plan for access reviews
• Create access reviews for groups and apps
• Monitor the access review findings
• Manage licenses for access reviews
• Automate management tasks for access review
• Configure recurring access reviews

• Define a privileged access strategy for administrative users (resources, roles, approvals, and thresholds)
• Configure Privileged Identity Management for Azure AD roles
• Configure Privileged Identity Management for Azure resources
• Assign roles
• Manage PIM requests
• Analyze PIM audit history and reports
• Create and manage emergency access accounts

• Analyze and investigate sign in logs to troubleshoot access issues
• Review and monitor Azure AD audit logs
• Enable and integrate Azure AD diagnostic logs with Log Analytics / Azure Sentinel
• Export sign in and audit logs to a third-party SIEM (security information and event management)
• Review Azure AD activity by using Log Analytics / Azure Sentinel, excluding KQL (Kusto Query Language) use
• Analyze Azure Active Directory workbooks / reporting
• Configure notifications

A: The SC 300 training is suitable for individuals who want to pursue a career as an Identity and Access Administrator or those responsible for implementing and managing identity and access solutions in Azure AD. It is beneficial for IT professionals specializing in identity management, security, and Azure technologies.

A: The SC 300 training covers various topics, including:

1. Designing an identity and access solution.
2. Implementing and managing identity and access in Azure AD.
3. Implementing and managing Azure AD Privileged Identity Management.
4. Implementing and managing Azure AD Conditional Access.
5. Monitoring and troubleshooting Azure AD identity and access solutions.

A: The SC 300 certification offers several benefits, including:

1. Demonstrating expertise: It validates your skills in designing and implementing identity and access solutions using Azure AD, showcasing your ability to secure and manage user identities.
2. Career advancement: The certification can enhance your employability and open doors to roles specializing in identity and access administration and security.
3. Increased job performance: The training equips you with the skills to effectively design and manage identity and access solutions, leading to improved job performance and security posture.
4. Recognition and credibility: It establishes you as an expert in Azure AD identity and access management and demonstrates your commitment to professional development.
5. Preparing for further certifications: The SC300 certification is part of the Identity and Access Administrator Associate certification path, which includes additional exams to achieve the associate-level certification.

A: The duration of SC 300 training can vary depending on the learning format, prior experience, and individual learning pace. Typically, it takes several days or weeks of intensive training to cover all the topics comprehensively.

A: It is recommended to have a foundational knowledge of Azure services and identity concepts. Familiarity with Azure AD, Azure AD Connect, and security principles would be beneficial.

A: To prepare for the SC 300 certification exam, you can follow these steps:

1. Review Microsoft’s official exam page and the exam skills outline to understand the topics covered.
2. Utilize Microsoft’s official SC 300 learning path, which includes online modules and resources.
3. Engage in hands-on practice by implementing identity and access solutions in Azure AD. Familiarize yourself with Azure AD features, identity synchronization, conditional access policies, and privileged identity management.
4. Take advantage of practice exams and sample questions to assess your knowledge and get familiar with the exam format.
5. Consider additional study materials, such as books, online courses, or video tutorials, to reinforce your understanding.

A: You can schedule the SC 300 certification exam through the Microsoft Learning website or by contacting a Microsoft-authorized exam provider. The exam is conducted online and can be taken remotely or at an authorized testing center.

A: No