Overview

Welcome to Design Security Solutions for Applications and Data, a focused and practical course designed for cybersecurity professionals, cloud security architects, and Microsoft cloud administrators. This course is part of the SC-100: Microsoft Certified Cybersecurity Architect Expert specialization and equips you with the expertise to design, implement, and manage secure application and data protection strategies in Microsoft’s cloud ecosystem. You’ll explore secure cloud application development practices, enforce strong identity controls with Microsoft Entra ID, and leverage Microsoft Defender for Cloud to safeguard workloads. The course also covers encryption at rest and in transit, key management with Azure Key Vault, data residency considerations, and governance strategies using Data Lifecycle Management (DLM). The course delivers 6–7 hours of targeted video lectures that combine theoretical insights with hands-on demonstrations, demos, and real-world security design scenarios. Organized into two core modules, each includes quizzes and in-video assessments to validate understanding. Enroll in “Design Security Solutions for Applications and Data” to gain the skills required to design secure, compliant, and resilient application and data protection strategies in Microsoft’s cloud ecosystem. Who Should Take This Course? Application Security Engineers & Cloud Developers Data Protection and Compliance Specialists Microsoft 365 and Azure Security Administrators Security Architects preparing for the SC-100 exam Course Modules: Microsoft Defender for Cloud to Protect Cloud Applications Microsoft Cloud Data Protection and Governance By the end of this specialization, you will: Master secure application design aligned with Microsoft’s security frameworks Implement encryption, classification, and governance for sensitive data Integrate identity-first strategies into application and data security design Be fully prepared to take and pass the SC-100 certification exam

Syllabus

Microsoft Defender for Cloud to Protect Cloud Applications

Welcome to Week 1 of the course! In this module, you’ll explore how to design and protect modern cloud-native applications using Microsoft Defender for Cloud and Entra ID. You’ll start by examining security considerations in cloud application development, followed by secure coding practices and vulnerability management. Then, you’ll learn how identity and access management plays a central role in securing apps with Microsoft Entra ID. Through practical demos, you’ll see how Defender for Cloud enhances application-level security and how data classification and sensitivity labels help manage information access. By the end of this week, you’ll be equipped with essential skills to build secure applications, apply access controls, and classify sensitive data to reduce risk and ensure compliance.

Microsoft Cloud Data Protection and Governance

This week’s focus is on building secure identity foundations using Microsoft Entra ID. You’ll begin by exploring core identity concepts such as users, roles, and access models (RBAC and ABAC), and then move into authentication strategies like MFA and Conditional Access. You’ll also dive into identity governance-including provisioning, deprovisioning, and access reviews-to ensure that user access is secure, minimal, and auditable. These lessons provide practical insights into securing access in both cloud-native and hybrid environments. By the end of the week, you’ll gain the confidence to implement robust identity and access policies using Entra ID to protect your organization’s digital assets.