What you'll learn

Most infrastructure breaches start at an asset somebody forgot: a server in another cloud, an internet-facing host outside the inventory, a plant device outside every monitoring tool, or a network path that trusts anything already inside it. In this course, SC-100: Designing Security Solutions for Infrastructure, you’ll gain the ability to design and evaluate security for servers, clients, workloads, and networks across hybrid and multicloud environments. First, you’ll explore how to design posture management with Microsoft Defender for Cloud, the Microsoft cloud security benchmark, Microsoft Secure Score, Azure Arc, Microsoft Defender External Attack Surface Management, and Microsoft Security Exposure Management attack paths. Next, you’ll discover how to specify security requirements for servers, mobile devices, clients, IoT devices, and operational technology, including Microsoft Defender for IoT, security baselines, and Windows LAPS. Finally, you’ll learn how to specify security baselines and requirements for SaaS, PaaS, IaaS, web, container, and AI workloads, and evaluate network designs and Security Service Edge solutions built on Microsoft Entra Internet Access and Microsoft Entra Private Access. When you’re finished with this course, you’ll have the skills and knowledge of infrastructure security design needed to recommend and defend a protection strategy across a hybrid and multicloud enterprise.