Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Advanced Search Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Microsoft 365 Security, Compliance, and Identity Administration
  • Table Of Contents Toc
  • Feedback & Rating feedback
Microsoft 365 Security, Compliance, and Identity Administration

Microsoft 365 Security, Compliance, and Identity Administration

By : Peter Rising
4.9 (17)
Buy this Book
close
close
Microsoft 365 Security, Compliance, and Identity Administration

Microsoft 365 Security, Compliance, and Identity Administration

4.9 (17)
By: Peter Rising
Buy this Book

Overview of this book

The Microsoft 365 Security, Compliance, and Identity Administration is designed to help you manage, implement, and monitor security and compliance solutions for Microsoft 365 environments. With this book, you’ll first configure, administer identity and access within Microsoft 365. You’ll learn about hybrid identity, authentication methods, and conditional access policies with Microsoft Intune. Next, you’ll discover how RBAC and Azure AD Identity Protection can be used to detect risks and secure information in your organization. You’ll also explore concepts such as Microsoft Defender for endpoint and identity, along with threat intelligence. As you progress, you’ll uncover additional tools and techniques to configure and manage Microsoft 365, including Azure Information Protection, Data Loss Prevention (DLP), and Microsoft Defender for Cloud Apps. By the end of this book, you’ll be well-equipped to manage and implement security measures within your Microsoft 365 suite successfully.
Table of Contents (25 chapters)
close
close
close
Preface
Preface
Who this book is for
What this book covers
Conventions used
Get in touch
Share Your Thoughts
Download a free PDF copy of this book
1
Part 1: Implementing and Managing Identity and Access
Part 1: Implementing and Managing Identity and Access
Free Chapter
2
Chapter 1: Planning for Hybrid Identity
chevron up
Chapter 1: Planning for Hybrid Identity
Planning your hybrid environment
Authentication methods in Azure AD
Synchronization methods with Azure AD Connect
Azure AD Connect cloud sync
Event monitoring and troubleshooting in Azure AD Connect
Summary
Questions
Further reading
3
Chapter 2: Authentication and Security
Chapter 2: Authentication and Security
Implementing Azure AD dynamic group membership
Implementing password management
Implementing and managing external identities
Implementing and managing MFA
Planning and implementing device authentication methods
Summary
Questions
Further reading
4
Chapter 3: Implementing Conditional Access Policies
Chapter 3: Implementing Conditional Access Policies
Explaining Conditional Access
Conditional Access and Microsoft Intune
Introducing the types of Conditional Access
Monitoring Conditional Access events
Summary
Questions
Further reading
5
Chapter 4: Managing Roles and Identity Governance
Chapter 4: Managing Roles and Identity Governance
Planning and configuring PIM
Planning and configuring entitlement management
Planning and configuring access reviews
Summary
Questions
Further reading
6
Chapter 5: Azure AD Identity Protection
Chapter 5: Azure AD Identity Protection
Understanding Identity Protection
Protecting users with risk and registration policies
Configuring alert options
Managing and resolving risk events
Summary
Questions
Further reading
7
Part 2: Implementing and Managing Threat Protection
Part 2: Implementing and Managing Threat Protection
8
Chapter 6: Configuring a Microsoft Defender for Identity Solution
Chapter 6: Configuring a Microsoft Defender for Identity Solution
Identifying the organizational need for MDI
Understanding the MDI architecture
Setting up MDI
Managing and monitoring MDI
Summary
Questions
Further reading
9
Chapter 7: Configuring Device Threat Protection with Microsoft Defender for Endpoint and Intune
Chapter 7: Configuring Device Threat Protection with Microsoft Defender for Endpoint and Intune
Planning and implementing MDE
Managing and monitoring MDE
Implementing Microsoft Defender Application Guard, Application Control, and exploit protection
Encrypting your Windows devices using BitLocker
Implementing application protection policies
Summary
Questions
Further reading
10
Chapter 8: Configuring Microsoft Defender for Office 365
Chapter 8: Configuring Microsoft Defender for Office 365
Protecting users and domains with anti-phishing protection and policies
Configuring Safe Attachments options and policies
Configuring Safe Links options, blocked URLs, and policies
Monitoring and remediating with Microsoft Defender for Office 365 reports
Running simulated attacks with Microsoft Defender for Office 365
Further attack simulation configuration options
Summary
Questions
Further reading
11
Chapter 9: Using Microsoft Sentinel to Monitor Microsoft 365 Security
Chapter 9: Using Microsoft Sentinel to Monitor Microsoft 365 Security
Planning and configuring Microsoft Sentinel
Configuring playbooks in Microsoft Sentinel
Creating and using automation rules to manage responses
Managing and monitoring your Microsoft Sentinel instance
Summary
Questions
Further reading
12
Chapter 10: Configuring Microsoft Defender for Cloud Apps
Chapter 10: Configuring Microsoft Defender for Cloud Apps
Planning your MDA implementation
Configuring MDA
Managing Cloud App Discovery
Managing the MDA catalog
Managing apps and app connectors in MDA
Configuring policies and templates
Using Conditional Access App Control with MDA
Reviewing and interpreting alerts, reports, and dashboards
Summary
Questions
Further reading
13
Part 3: Implementing and Managing Information Protection
Part 3: Implementing and Managing Information Protection
14
Chapter 11: Managing Sensitive Information
Chapter 11: Managing Sensitive Information
Planning a sensitivity label solution for your organization
Creating and managing SITs
Setting up sensitivity labels and policies
Configuring and using Activity explorer
Using sensitivity labels with Teams, SharePoint, OneDrive, and Office apps
Summary
Questions
Further reading
15
Chapter 12: Managing Microsoft Purview Data Loss Prevention
Chapter 12: Managing Microsoft Purview Data Loss Prevention
Planning and implementing DLP
Managing DLP policies for Microsoft 365 workloads
DLP reporting and alerting capabilities
Implementing Endpoint DLP
Summary
Questions
Further reading
16
Chapter 13: Managing Microsoft Purview Data Lifecycle Management
Chapter 13: Managing Microsoft Purview Data Lifecycle Management
Planning for data lifecycle management
Analyzing reports and dashboards
Configuring retention labels and policies
Creating a retention policy
Planning and implementing adaptive scopes
Finding and recovering deleted Microsoft 365 data
Summary
Questions
Further reading
17
Part 4: Managing Compliance Features in Microsoft 365
Part 4: Managing Compliance Features in Microsoft 365
18
Chapter 14: Monitoring and Analyzing Audit Logs and Reports in Microsoft Purview
Chapter 14: Monitoring and Analyzing Audit Logs and Reports in Microsoft Purview
Planning for auditing and reporting
Investigating compliance activities by using audit logs
Reviewing and interpreting compliance reports and dashboards
Configuring alert policies
Configuring audit log retention policies
Summary
Questions
Further reading
19
Chapter 15: Planning For, Conducting, and Managing eDiscovery Cases
Chapter 15: Planning For, Conducting, and Managing eDiscovery Cases
Recommending eDiscovery (Standard) or eDiscovery (Premium)
Planning for content searches and eDiscovery
Delegating the required permissions to use search and discovery tools
Creating eDiscovery cases
Managing eDiscovery cases
Summary
Questions
Further reading
20
Chapter 16: Managing Regulatory and Privacy Requirements
Chapter 16: Managing Regulatory and Privacy Requirements
Planning your regulatory compliance journey in Microsoft 365
Managing regulatory compliance in Microsoft Purview Compliance Manager
Exploring Microsoft Priva
Summary
Questions
Further reading
21
Chapter 17: Managing Insider Risk Solutions in Microsoft 365
Chapter 17: Managing Insider Risk Solutions in Microsoft 365
Implementing Customer Lockbox
Implementing and managing Communication Compliance policies
Implementing and managing insider risk management policies
Implementing and managing Information Barriers policies
Implementing and managing Privileged Access Management
Summary
Questions
Further reading
22
Answers
Chapter 1
Chapter 2
Chapter 3
Chapter 4
Chapter 5
Chapter 6
Chapter 7
Chapter 8
Chapter 9
Chapter 10
Chapter 11
Chapter 12
Chapter 13
Chapter 14
Chapter 15
Chapter 16
Chapter 17
23
Index
Index
Why subscribe?
24
Other Books You May Enjoy
Other Books You May Enjoy
Packt is searching for authors like you
Share Your Thoughts
Download a free PDF copy of this book

Questions

  1. Which of the following is not one of the identity methods available with Azure AD?
    1. Pass-through authentication
    2. Federation
    3. MFA
    4. Password hash sync
  2. Your organization needs to synchronize an on-premises Active Directory with Azure AD. Users must authenticate to the on-premises infrastructure while connecting to services with their Microsoft 365 credentials. You need to recommend an identity methodology that accomplishes the goal but minimizes costs and complexity. What should you recommend?
    1. Cloud-only identity
    2. Pass-through authentication
    3. Active Directory Federation Services
    4. Password hash synchronization
  3. True or false? Azure AD Connect Cloud sync includes support for Exchange hybrid writeback.
    1. True
    2. False
  4. Which of the following Microsoft 365 licenses allows users to use SSPR (choose two)?
    1. Azure AD Premium P2
    2. Intune
    3. Azure Information Protection P1
    4. Azure AD Premium P1
  5. Which of the following PowerShell commands could you use to run a full Azure AD Connect sync manually?
    1. Start-ADSyncSyncCycle -PolicyType Initial
    2. Start-ADSyncSyncCycle -PolicyType Delta
    3. Start-ADSyncSyncCycle -PolicyType Full
    4. Start-ADSyncSyncCycle -PolicyType Immediate
  6. True or false? Self-service password reset is automatically enabled for Global Administrator accounts in Microsoft 365.
    1. True
    2. False
  7. What is the maximum number of authentication agents that can be configured in Azure AD for pass-through authentication?
    1. 5
    2. 10
    3. 30
    4. 40
  8. How frequently (by default) does Azure AD Connect automatically synchronize on-premises AD changes to Azure AD?
    1. Every 20 minutes
    2. Once an hour
    3. Every 30 minutes
    4. Every 15 minutes
  9. Which of the following could be a possible cause for Azure AD Connect synchronization issues or errors?
    1. A duplicate proxy address is detected.
    2. SSPR has been incorrectly configured.
    3. You are using password hash sync rather than pass-through authentication.
    4. The AD Connect wizard was run with express installation settings rather than a customized installation.
  10. When deploying federation with AD FS, what is the minimum number of web application proxy servers you should configure on your perimeter network?
    1. 5
    2. 2
    3. 3
    4. 7
End of Section 8
Next Section
bookmark search playlist font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY