Microsoft Identity and Access Administrator Associate (SC-300) Cert Prep by Microsoft Press

1. Configure and Manage a Microsoft Entra Tenant

• Objectives
• Configure and manage Microsoft Entra ID roles
• Configure delegation by using administrative units
• Analyze Microsoft Entra ID role permissions
• Configure and manage custom domains
• Configure tenant-wide settings

2. Create, Configure, and Manage Microsoft Entra Identities

• Objectives
• Create, configure, and manage users
• Create, configure, and manage groups
• Configure and manage device join and registration, including writeback
• Assign, modify, and report on licenses

3. Implement and Manage Identities for External Users and Tenants

• Objectives
• Manage external collaboration settings in Microsoft Entra ID
• Invite external users, individually or in bulk
• Manage external user accounts in Microsoft Entra ID
• Configure identity providers, including SAML or WS-Fed

4. Implement and Manage Hybrid Identity

• Objectives
• Implement and manage Microsoft Entra Connect
• Implement and manage Microsoft Entra Connect cloud sync
• Implement and manage password hash synchronization
• Implement and manage pass-through authentication
• Implement and manage seamless single sign-on
• Implement and manage federation, excluding manual AD FS deployments
• Implement and manage Microsoft Entra Connect Health
• Troubleshoot synchronization errors

5. Plan, Implement, and Manage Azure MFA and Self-Service Password Reset

• Objectives
• Plan Azure MFA deployment, excluding MFA Server
• Configure and deploy SSPR
• Implement and manage Azure MFA settings
• Manage MFA settings for users
• Extend Azure MFA to third party and on-premises devices
• Monitor Azure MFA activity

6. Plan, Implement, and Manage Microsoft Entra ID User Authentication

• Objectives
• Plan for authentication
• Implement and manage authentication protocols
• Implement and manage Windows Hello for Business
• Implement and manage password protection and smart lockout
• Implement certificate-based authentication in Microsoft Entra ID
• Configure Microsoft Entra ID user authentication for Windows and Linux VMs on Azure

7. Plan, Implement, and Manage Microsoft Entra ID Conditional Access

• Objectives
• Plan Conditional Access policies
• Implement Conditional Access policy assignments
• Implement Conditional Access policy controls
• Test and troubleshoot Conditional Access policies
• Implement session management
• Implement device-enforced restrictions
• Implement continuous access evaluation
• Create a Conditional Access policy from a template

8. Manage Entra ID Identity Protection

• Objectives
• Implement and manage a user risk policy
• Implement and manage a sign-in risk policy
• Implement and manage an MFA registration policy
• Monitor, investigate, and remediate risky users
• Implement security for workload identities

9. Implement Access Management for Azure Resources

• Objectives
• Assign Azure roles
• Configure custom Azure roles
• Create and configure managed identities
• Use managed identities to access Azure resources
• Analyze Azure role permissions
• Configure Azure Key Vault RBAC and policies

10. Manage and Monitor Application Access by Using Microsoft Defender for Cloud Apps

• Objectives
• Discover and manage apps by using Microsoft Defender for Cloud Apps
• Configure connectors to apps
• Implement application-enforced restrictions
• Configure Conditional Access app control
• Create access and session policies in Microsoft Defender for Cloud Apps
• Implement and manage policies for OAuth apps

11. Plan, Implement, and Monitor the Integration of Enterprise Applications

• Objectives
• Configure and manage user and admin consent
• Discover apps by using AD FS application activity reports
• Design and implement access management for apps
• Design and implement app management roles
• Monitor and audit activity in enterprise applications
• Design and implement integration for on-premises apps by using Microsoft Entra ID application proxy
• Design and implement integration for SaaS apps
• Provision and manage users, groups, and roles on Enterprise applications
• Create and manage application collections

12. Plan and Implement Application Registrations

• Objectives
• Plan for application registrations
• Implement application registrations
• Configure application permissions
• Implement application authorization
• Plan and configure multi-tier application permissions
• Manage and monitor applications by using app governance

13. Plan and Implement Entitlement Management

• Objectives
• Plan entitlements
• Create and configure catalogs
• Create and configure access packages
• Manage access requests
• Implement and manage terms of use
• Manage the lifecycle of external users in Microsoft Entra Governance settings
• Configure and manage connected organizations
• Review per-user entitlements by using entitlement management

14. Plan, Implement, and Manage Access Reviews

• Objectives
• Plan for access reviews
• Create and configure access reviews for groups and apps
• Create and configure access review programs
• Monitor access review activity
• Respond to access review activity, including automated and manual responses

15. Plan and Implement Privileged Access

• Objectives
• Plan and manage Azure roles in Privileged Identity Management (PIM), including settings and assignments
• Plan and manage Azure resources in PIM, including settings and assignments
• Plan and configure Privileged Access groups
• Manage PIM requests and approval process
• Analyze PIM audit history and reports
• Create and manage break-glass accounts

16. Monitor Microsoft Entra ID

• Objectives
• Design a strategy for monitoring Microsoft Entra ID
• Review and analyze sign-in, audit, and provisioning logs by using the Microsoft Entra ID console
• Configure diagnostic settings, including Log Analytics, storage accounts, and Event Hub
• Monitor Microsoft Entra ID by using Log Analytics, including KQL queries
• Analyze Microsoft Entra ID by using workbooks and reporting in the Microsoft Entra ID console
• Monitor and improve the security posture by using the identity secure score