3Identity, privileged access, and compliance

• 3.1Entra ID and hybrid/external identity

  Understand identity design for hybrid/multicloud centered on Microsoft Entra ID, hybrid-identity sync/authentication options, external identities (B2B, decentralized), and identity/network/application controls for access to SaaS/PaaS/IaaS/on-prem.

• 3.2Modern authentication/authorization and Conditional Access

  Understand a modern authentication/authorization strategy including Conditional Access, continuous access evaluation (CAE), risk scoring, and protected actions; validating Conditional Access alignment with Zero Trust; AD DS hardening; and managing secrets/keys/certificates.

• 3.3Securing privileged access and CIEM

  Understand assigning/delegating privileged roles via the enterprise access model, Entra Privileged Identity Management (PIM)/entitlement management/access reviews, cloud infrastructure entitlement management (CIEM), secure workstations for privileged access (PAW), and securing cloud-tenant administration.

• 3.4Designing for regulatory compliance

  Understand translating compliance requirements into security controls, addressing compliance via Microsoft Purview, privacy via Microsoft Priva, Azure Policy, and evaluating alignment with regulatory standards/benchmarks via Microsoft Defender for Cloud.