5Application and data security

• 5.1Securing Microsoft 365

  Understand evaluating productivity/collaboration posture with Microsoft Secure Score, Microsoft Defender for Office 365 and Microsoft Defender for Cloud Apps, device management with Microsoft Intune, and securing Microsoft 365 data with Microsoft Purview.

• 5.2Data security for Microsoft 365 Copilot

  Understand evaluating data security and compliance controls for Microsoft 365 Copilot: inheritance of existing access permissions and sensitivity labels, curbing oversharing, and applying Purview auditing and DLP.

• 5.3Securing applications

  Understand evaluating the application portfolio posture, assessing business-critical apps via threat modeling, a full-lifecycle application-security strategy and secure-development standards, authentication via workload identity, API management and security, and Azure Web Application Firewall (WAF).

• 5.4Securing data

  Understand data discovery/classification, prioritizing data-threat mitigation, encryption at rest/in transit (Azure Key Vault, infrastructure encryption), data protection for Azure workloads (Azure SQL, Azure Synapse Analytics, Azure Cosmos DB) and Azure Storage, and Microsoft Defender for Storage/Databases.