Searching CertSprout…

CertSproutGrow your skills. Collect your wins.

CertSprout is not affiliated with CompTIA, Microsoft, Cisco, ISC2, AWS or any other certification body. CertSprout reads credentials from issuers’ public records at the credential holder’s request.

For teams Privacy Terms Support About our bot Created by Samios Software Solutions

A little curiosity goes a long way

Find your next discovery.

Search certifications, learning topics, career paths, public profiles and help across CertSprout.

Search CertSprout

Browse certifications by field or career path →Provider offerings & September 2026 review notes →

Everything Certifications Mini-lessons People Career paths Study resources Exam deals App & help

Showing 20 results · Page 17 for “Microsoft”. More results are available below.

Mini-lessons

SC-300 · Identity and access

Authentication and authorization answer different questions

Authentication establishes who or what is requesting access. Authorization decides which actions that identity may perform on a resource. A successful sign-in therefore does not imply permis…

SC-300 · Access governance

Access should follow the person's current role

Access has a lifecycle: grant it for a justified need, review it when responsibilities change, and remove it when the need ends. Old group memberships and privileged accounts can outlive the…

SC-401 · Data governance

Assign ownership across the data lifecycle

← PreviousPage 17Next →

People search uses public names, handles and headlines. Private and unlisted profiles are excluded. Your goals are visible only to you in search.

Data governance defines who is accountable for data meaning, quality, access and retention. A catalog can describe datasets and lineage, but decisions still need responsible owners. Establis…

SC-401 · Privacy engineering

Minimize personal data across every copy

Privacy engineering applies lifecycle controls to application data, telemetry, caches, indexes and exports. Collect only what the feature needs and avoid unnecessary sensitive values in logs…

SC-401 · Information protection and governance

Classify information before choosing protection

…lassification and supported protection settings. Which Microsoft feature fits? Sensitivity labels Sensitivity labels classify content and can apply protection. Resource tags do not classify …

SC-500 · AI security boundaries

AI security boundaries

This concept review develops the reasoning needed for ai security boundaries. Start by identifying the relevant assets, permissions, evidence and trust boundaries. Distinguish what the obser…

SC-500 · Azure security operations

Connect security posture with operational response

Security posture management identifies risky configurations, while threat detection identifies suspicious activity. Both need owners and a response process. In Azure, inspect the affected re…

SC-500 · Cloud security

Cloud security follows the data and identities

Moving a workload to a provider does not remove the need to manage permissions, secrets and sensitive information. Map where data enters, is stored and leaves, then identify the identities a…

SC-500 · Microsoft Entra identity

Use identity signals to control access

Microsoft Entra connects identity verification with access decisions. Conditional Access evaluates configured signals and applies requirements such as additional verification. Test policy sc…

SC-730 · AI security boundaries

AI security boundaries

This concept review develops the reasoning needed for ai security boundaries. Start by identifying the relevant assets, permissions, evidence and trust boundaries. Distinguish what the obser…

SC-730 · Technology governance

Governance sets direction and accountability

Technology governance determines priorities, decision rights and oversight so technology supports organizational objectives. Management then plans and performs the work within that direction…

SC-730 · Risk assessment and treatment

Treat risk with an accountable decision

Risk combines the possibility of an unwanted event with its consequences for an objective. Identify the asset, threat and conditions before choosing a response. Controls may reduce likelihoo…

SC-730 · Security architecture

Place controls at trust boundaries

A trust boundary is where data or actions cross between components with different security assumptions. Map those crossings and require appropriate validation, identity checks and authorizat…

SC-900 · Describe the concepts of security, compliance, and identity

Identities, data and endpoints are always yours

The shared responsibility model divides security duties between the cloud provider and the customer, and the split moves with the service model. In on-premises everything is yours. With IaaS…

SC-900 · Describe the concepts of security, compliance, and identity

Verify explicitly, least privilege, assume breach

Zero Trust replaces the idea of a trusted internal network with the rule that every request is untrusted until proven otherwise. Verify explicitly means always authenticate and authorise usi…

SC-900 · Describe the concepts of security, compliance, and identity

Encryption hides; hashing fingerprints; signing proves

Encryption transforms data so only someone with the key can read it. Symmetric encryption uses one shared key and is fast, so it protects bulk data. Asymmetric encryption uses a public and p…

SC-900 · Describe the capabilities of Microsoft Entra

A tenant is your own instance of Entra ID

When an organisation signs up for a Microsoft cloud service, it receives a tenant: a dedicated, isolated instance of Microsoft Entra ID that holds its users, groups, devices, applications an…

SC-900 · Describe the capabilities of Microsoft Entra

Entra Connect makes on-prem AD and Entra ID one identity

…at works both against on-premises Active Directory and Microsoft cloud services. Microsoft Entra Connect, or the lighter Entra Cloud Sync, synchronises users and groups from AD to Entra ID a…

SC-900 · Describe the capabilities of Microsoft Entra

Passwordless: Windows Hello, FIDO2, Authenticator sign-in

Microsoft Entra ID supports three passwordless methods that remove the password entirely rather than adding a second factor to it. Windows Hello for Business uses a PIN or biometric tied to …

SC-900 · Describe the capabilities of Microsoft Entra

Conditional Access: signals in, decision out

Conditional Access is the Zero Trust policy engine of Microsoft Entra. Each policy names assignments, the users, apps, locations, device platforms and risk levels it applies to, and access c…