1Concepts of Security, Compliance, and Identity

• 1.1Zero Trust and Defense in Depth

  Understand core security ideas—Zero Trust, defense in depth, the shared responsibility model, and confidentiality/integrity/availability (CIA). The starting point for SC-900.

• 1.2Authentication, Authorization, and Encryption

  Understand the difference between authentication (AuthN) and authorization (AuthZ), and the basics of encryption and hashing.