What you'll learn

Most application and data exposure is inherited: an overshared site Copilot can now summarize, a pipeline secret nobody rotated, an API published without a gateway, or a storage account that still accepts its access keys. In this course, SC-100: Designing Security Solutions for Applications and Data, you’ll gain the ability to evaluate and design security for Microsoft 365 workloads, applications, and data, including the data used in AI workloads. First, you’ll explore how to evaluate Microsoft 365 security with Microsoft Secure Score, Microsoft Defender for Office 365, Microsoft Defender for Cloud Apps, Microsoft Intune, Microsoft Purview, and the data security and compliance controls for Microsoft 365 Copilot. Next, you’ll discover how to design an application security program with threat modeling, a full lifecycle strategy, and secure development standards, and how to map workload identities, Azure API Management, and Azure Web Application Firewall to application requirements. Finally, you’ll learn how to design data security from discovery, classification, and encryption with Azure Key Vault through Azure SQL, Azure Synapse Analytics, Azure Cosmos DB, Azure Storage, Microsoft Defender for Storage, Microsoft Defender for Databases, and the data used in AI workloads. When you’re finished with this course, you’ll have the skills and knowledge of application and data security design needed to recommend and defend protection for the applications and data an enterprise runs on Microsoft 365 and Azure.